[strongSwan] disable new SA's at a strongSwan instance

Tobias Brunner tobias at strongswan.org
Wed Jun 6 10:43:04 CEST 2018


Hi Mike,

> We have a customer who wants to avoid new SA Connections when the server
> has high processor load.
> 
> Is there a known strategy to realize those requirements?

See [1] for the currently available options to limit new SAs.

Regards,
Tobias

[1]
https://wiki.strongswan.org/projects/strongswan/wiki/JobPriority#IKE_SA_INIT-dropping


More information about the Users mailing list