[strongSwan] Strongswan freeze

[Andreas Steffen]

Hi Joshua,

how many connections and how many charon threads are you running.
I just see from the log that always thread 16 is answering, so
it might be that you have run out of threads.

  ipsec statusall

gives you the current jobs/threads situation.

Regards

Andreas

On 07/04/2013 07:55 PM, joshua gross wrote:
> Hi, we have a n issue where we see a number of there messages in our
> logs (messages below) and then strongswan stops putting through traffic
> and accepting new connections.  Essentially it hangs.
> Can anyone provide some insight into this?
> 
> Jul  3 19:25:05 16[KNL] creating rekey job for ESP CHILD_SA with SPI
> c04e9aee and reqid {1115}
> Jul  3 19:25:07 16[KNL] creating rekey job for ESP CHILD_SA with SPI
> 06295e90 and reqid {1155}
> Jul  3 19:25:10 16[KNL] creating rekey job for ESP CHILD_SA with SPI
> 0b7ffc36 and reqid {1127}
> Jul  3 19:25:14 16[KNL] creating rekey job for ESP CHILD_SA with SPI
> 099af4b4 and reqid {1152}
> Jul  3 19:25:19 16[KNL] creating delete job for ESP CHILD_SA with SPI
> c22c511c and reqid {734}
> Jul  3 19:25:19 16[KNL] creating delete job for ESP CHILD_SA with SPI
> 0b9de2c7 and reqid {734}
> Jul  3 19:25:22 16[KNL] creating rekey job for ESP CHILD_SA with SPI
> c7f78aa6 and reqid {1165}
> Jul  3 19:25:22 16[KNL] creating rekey job for ESP CHILD_SA with SPI
> ced489dc and reqid {1160}
> Jul  3 19:25:27 16[KNL] creating rekey job for ESP CHILD_SA with SPI
> cef09c72 and reqid {1133}
> Jul  3 19:25:31 16[KNL] creating rekey job for ESP CHILD_SA with SPI
> cc84aaa8 and reqid {1156}
> 
> 
> 
> ------------------------------------------------------------------------
> 
> 
> 
> Joshua J. Gross

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4468 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20130704/84c6693b/attachment.bin>