<html><body><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt; color: #000000"><div>I would venture to say no fixes will be back ported to anything older than liberty at this point.</div><div><br data-mce-bogus="1"></div><div>You should upgrade anyway.</div><div><br></div><br><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>From: </b>"Davide Panarese" <dpanarese@enter.eu><br><b>To: </b>openstack@lists.openstack.org<br><b>Sent: </b>Monday, September 26, 2016 12:19:08 PM<br><b>Subject: </b>[Openstack] [Neutron] Juno Neutron VPNaaS unstable<br></div><br><div data-marker="__QUOTED_TEXT__"><style>body{font-family:Helvetica,Arial;font-size:13px}</style>Hello,<div>we have big problems with VPNaaS in multiregion Production environment on Openstack Juno with unstable connection between vrouters or vrouter to external pfSense for example. </div><div>On network nodes we have different kernel parameters. Anyone knows which should be exactly kernel parameters to configure in kernel if there are? Is there any issue with some kernel versions? </div><br><div>We use openswan 2.6.38 on kernel 3.13.0-65 and 3.13.0-74.</div><br><div>The errors we noticed are that the VPN connection is UP but packets doesn’t pass through encrypted tunnel because there are mismatch with xfrm state. Seems that sometimes when SA is re-established openswan can’t ri-negotiate it and show error below:</div><br><div>ignoring Delete SA payload: PROTO_IPSEC_ESP SA(<xfrm state id>) not found (maybe expired)</div><br><br><div>Anyone could help?</div><br><div>Thank you very much.</div><br><div>Regards,</div><div>Davide</div><br>_______________________________________________<br>Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack<br>Post to : openstack@lists.openstack.org<br>Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack<br></div></div></body></html>