[Swan-dev] New problem in 3.9 with crypto overload

[Tuomo Soini]

On Tue, 15 Jul 2014 20:30:49 +0300
Tuomo Soini <tis at foobar.fi> wrote:

> I see in one system new problem which never happened in 3.8.
> 
> Jul 15 15:27:16 firewall2 pluto[15180]: "tunnel1" #10794: message in
> state STATE_MAIN_R1 ignored due to cryptographic overload Jul 15
> 15:27:56 firewall2 pluto[15180]: "tunnel1" #10805: message in state
> STATE_MAIN_R1 ignored due to cryptographic overload Jul 15 15:28:06
> firewall2 pluto[15180]: "tunnel1" #10805: message in state
> STATE_MAIN_R1 ignored due to cryptographic overload Jul 15 15:28:16
> firewall2 pluto[15180]: "tunnel1" #10805: message in state
> STATE_MAIN_R1 ignored due to cryptographic overload Jul 15 15:28:56
> firewall2 pluto[15180]: "tunnel1" #10814: message in state
> STATE_MAIN_R1 ignored due to cryptographic overload Jul 15 15:29:06
> firewall2 pluto[15180]: "tunnel1" #10814: message in state
> STATE_MAIN_R1 ignored due to cryptographic overload Jul 15 15:29:16
> firewall2 pluto[15180]: "tunnel1" #10814: message in state
> STATE_MAIN_R1 ignored due to cryptographic overload

Ok. After some of these:

discarding packet received during asynchronous work (DNS or crypto) in
STATE_MAIN_I1 

There is:

can not start crypto helper: failed to find any available worker 

After that we can't get anything done.

-- 
Tuomo Soini <tis at foobar.fi>
Foobar Linux services
+358 40 5240030
Foobar Oy <http://foobar.fi/>