Racoon and setkey problems

[Andrey V. Elsukov]

On 20.02.2018 08:55, Eugene Grosbein wrote:
>> yes, all output is from same machine. I'll recheck all configs again,
>> or, if it's OK, I can post them here. The most confusing thing is that
>> everything worked as a charm several years. And nothing changed in
>> configurations until logs stars to fill up with these messages and i
>> tried to play with some settings to troubleshoot.
> 
> You may be suffering from some kind of massive IPSEC-scanning bots activity
> that try to expoit IPSEC-related bugs and trigger some memory leak.
> 
> You should really try 11.1.

11.1-RELEASE had several bugs in new IPsec code, that were fixed in
stable/11 branch. So, if you want to try, I recommend to use stable/11.
Also there is very little chance that some problem will be fixed in 10.x
branch.

-- 
WBR, Andrey V. Elsukov

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 553 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20180220/b16e4bfd/attachment.sig>