-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
4.16, 4.17, 4.18
-
None
It is been observed that the esp_offload kernel module might be loaded by libreswan even if bond ESP offloads have been correctly turned off.
This might be because ipsec service and configure-ovs run at the same time, so it is possible that ipsec service starts when bond offloads are not yet turned off and trick libreswan into thinking they should be used.
The potential fix would be to run ipsec service after configure-ovs.
- blocks
-
OCPBUGS-43917 Setting ESP offload off for bonds does not work reliably
- ASSIGNED
- is cloned by
-
OCPBUGS-43917 Setting ESP offload off for bonds does not work reliably
- ASSIGNED
- links to