[strongSwan] Strange behaviour

Martin Willi martin at strongswan.org
Mon Oct 25 09:39:15 CEST 2010


Hi Raph,

> creating rekey job for ESP CHILD_SA with SPI cbf0f0af and reqid {3720}
> creating rekey job for ESP CHILD_SA with SPI c3a35904 and reqid {3721}
> creating delete job for ESP CHILD_SA with SPI c2eb09ce and reqid {3720}
> creating delete job for ESP CHILD_SA with SPI cbf0f0af and reqid {3720}
> creating delete job for ESP CHILD_SA with SPI c3b5dc9e and reqid {3721}
> creating delete job for ESP CHILD_SA with SPI c3a35904 and reqid {3721}
> creating rekey job for ESP CHILD_SA with SPI c665f5aa and reqid {3722}
> creating rekey job for ESP CHILD_SA with SPI c1ccd29a and reqid {3718}
> ...

The kernel triggers many rekey/delete events for the installed CHILD_SAs
concurrently. What is your rekey configuration (lifetime/margin/fuzz)?

Regards
Martin





More information about the Users mailing list