<html dir="ltr"><head></head><body style="text-align:left; direction:ltr;"><div>Hi All</div><div><br></div><div>I'm seeing a huge number of these events in the journalctl log, about 20000 per second on Rocky linux 8, libreswan-4.5-1.el8_7.1.x86_64</div><div><br></div><div>This is the only host which uses TCP rather than UDP. When using UDP on occasions the host (right side) won't connect as it appears to be identified as another host. (Another issue for later)</div><div><br></div><div>"connection from X.X.X.X:28007: IKETCP ENABLED: socket 14: 0 byte packet indicates EOF"</div><div><br></div><div>RSA keys are being used for auth</div><div><br></div><div>Configuration is something like the following</div><div>## Left</div><div>conn L-R</div><div> leftid=host-left</div><div> left=a.a.a.a</div><div> leftsubnet=0.0.0.0/0</div><div> leftmodecfgserver=yes</div><div> leftxauthserver=yes</div><div><br></div><div> leftrsasigkey=0sAwEAAZttF81FA4w.......dmw==</div><div> <a href="file:///rightid=@h">rightid=@host</a>-right</div><div> right=%any</div><div> rightaddresspool=10.205.205.18-10.205.205.18</div><div> modecfgdns="c.c.c.c e.e.e.e f.f.f.f g.g.g.g"</div><div> # rsakey AwEAAZ277</div><div> rightrsasigkey=0sAwEAAZ277................5yrX/yHxJ/rs8=</div><div> authby=rsasig</div><div> ikev2=insist</div><div> auto=add</div><div> dpddelay=30</div><div> dpdtimeout=120</div><div> dpdaction=clear</div><div><br></div><div><br></div><div>## Right</div><div>conn L-R</div><div> leftid=host-left</div><div> left=a.a.a.a</div><div> leftsubnet=0.0.0.0/0</div><div> # rsakey AwEAAZttF</div><div> leftrsasigkey=0sAwEAAZttF........kj+Sxdmw==</div><div> <a href="file:///rightid=@h">rightid=@host</a>-right</div><div> right=%defaultroute</div><div> rightmodecfgclient=yes</div><div> rightsubnet=0.0.0.0/0</div><div> rightxauthclient=yes</div><div> # rsakey AwEAAZ277</div><div> rightrsasigkey=0sAwEAAZ277........../rs8=</div><div> type=tunnel</div><div> mtu=1400</div><div> authby=rsasig</div><div> auto=start</div><div> ikev2=insist</div><div> mobike=yes</div><div> rekey=yes</div><div> enable-tcp=yes</div><div><br></div><div>####</div><div><br></div><div><br></div><div></div><div></div></body></html>