Nov 12 16:04:09.901649 ip-10-0-15-154 kubenswrapper[2577]: I1112 16:04:09.901612    2577 ???:1] "http: TLS handshake error from 10.0.15.154:46388: EOF"
Nov 12 16:04:14.901567 ip-10-0-15-154 kubenswrapper[2577]: I1112 16:04:14.901531    2577 ???:1] "http: TLS handshake error from 10.0.15.154:38286: EOF"
Nov 12 16:04:19.902062 ip-10-0-15-154 kubenswrapper[2577]: I1112 16:04:19.902018    2577 ???:1] "http: TLS handshake error from 10.0.15.154:38338: EOF"
Nov 12 16:04:20.434264 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963460.4342] audit: op="checkpoint-create" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:20.435155 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963460.4351] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:20.810205 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963460.8101] audit: op="connection-add" uuid="98317cf9-ebff-482f-86f0-88b8c0b1e751" name="hosta_conn" pid=57614 uid=0 result="success"
Nov 12 16:04:20.811023 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963460.8110] vpn[0x561cfd1bc180,98317cf9-ebff-482f-86f0-88b8c0b1e751,"hosta_conn"]: starting libreswan
Nov 12 16:04:20.811306 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963460.8112] audit: op="connection-activate" uuid="98317cf9-ebff-482f-86f0-88b8c0b1e751" name="hosta_conn" pid=57614 uid=0 result="success"
Nov 12 16:04:20.817789 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963460.8177] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:20.835808 ip-10-0-15-154 NetworkManager[57644]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:20.837103 ip-10-0-15-154 NetworkManager[57645]: using kernel interface: xfrm
Nov 12 16:04:20.837103 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.837103 ip-10-0-15-154 NetworkManager[57645]: interface lo [::1]:UDP/4500 (NAT)
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: interface lo [::1]:UDP/500
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: interface lo 127.0.0.1:UDP/4500 (NAT)
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: interface lo 127.0.0.1:UDP/500
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: interface br-ex 10.0.15.154:UDP/4500 (NAT)
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: interface br-ex 10.0.15.154:UDP/500
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: interface br-ex 169.254.0.2:UDP/4500 (NAT)
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: interface br-ex 169.254.0.2:UDP/500
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: interface ovn-k8s-mp0 10.128.2.2:UDP/4500 (NAT)
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: interface ovn-k8s-mp0 10.128.2.2:UDP/500
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: fips mode=disabled;
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: SElinux=enabled
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: seccomp=disabled
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: config setup options:
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: configdir=/etc, configfile=/etc/ipsec.conf, secrets=/etc/ipsec.secrets, ipsecdir=/etc/ipsec.d
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: nssdir=/var/lib/ipsec/nss, dumpdir=/run/pluto, statsbin=unset
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: dnssec-rootkey-file=/var/lib/unbound/root.key, dnssec-trusted=<unset>
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: sbindir=/usr/sbin, libexecdir=/usr/libexec/ipsec
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: pluto_version=5.2, pluto_vendorid=OE-Libreswan-5.2
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: nhelpers=-1, uniqueids=yes, dnssec-enable=yes, shuntlifetime=900s, xfrmlifetime=30s
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: logfile='<syslog>', logappend=yes, logip=yes, audit-log=yes
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: ddos-cookies-threshold=25000, ddos-max-halfopen=50000, ddos-mode=auto, ikev1-policy=drop
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: ikebuf=0, msg_errqueue=yes, crl-strict=no, crlcheckinterval=0, listen=<any>, nflog-all=0
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: ocsp-enable=no, ocsp-strict=no, ocsp-timeout=2, ocsp-uri=<unset>
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: ocsp-trust-name=<unset>
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: ocsp-cache-size=1000, ocsp-cache-min-age=3600, ocsp-cache-max-age=86400, ocsp-method=get
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: global-redirect=no, global-redirect-to=<unset>
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: debug:
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: nat-traversal: keep-alive=20, nat-ikeport=4500
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: virtual-private (%priv):
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: Kernel algorithms supported:
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=3DES_CBC, keysizemin=192, keysizemax=192
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=AES_CBC, keysizemin=128, keysizemax=256
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=AES_CCM_12, keysizemin=128, keysizemax=256
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=AES_CCM_16, keysizemin=128, keysizemax=256
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=AES_CCM_8, keysizemin=128, keysizemax=256
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=AES_CTR, keysizemin=128, keysizemax=256
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=AES_GCM_12, keysizemin=128, keysizemax=256
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=AES_GCM_16, keysizemin=128, keysizemax=256
Nov 12 16:04:20.837441 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=AES_GCM_8, keysizemin=128, keysizemax=256
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=CAMELLIA_CBC, keysizemin=128, keysizemax=256
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=CHACHA20_POLY1305, keysizemin=256, keysizemax=256
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=NULL, keysizemin=0, keysizemax=0
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm ESP encrypt: name=NULL_AUTH_AES_GMAC, keysizemin=128, keysizemax=256
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm AH/ESP auth: name=AES_CMAC_96, key-length=128
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm AH/ESP auth: name=AES_XCBC_96, key-length=128
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm AH/ESP auth: name=HMAC_MD5_96, key-length=128
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm AH/ESP auth: name=HMAC_SHA1_96, key-length=160
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm AH/ESP auth: name=HMAC_SHA2_256_128, key-length=256
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm AH/ESP auth: name=HMAC_SHA2_256_TRUNCBUG, key-length=256
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm AH/ESP auth: name=HMAC_SHA2_384_192, key-length=384
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm AH/ESP auth: name=HMAC_SHA2_512_256, key-length=512
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm AH/ESP auth: name=NONE, key-length=0
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: IKE algorithms supported:
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE encrypt: v1id=5, v1name=OAKLEY_3DES_CBC, v2id=3, v2name=3DES, blocksize=8, keydeflen=192
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE encrypt: v1id=8, v1name=OAKLEY_CAMELLIA_CBC, v2id=23, v2name=CAMELLIA_CBC, blocksize=16, keydeflen=128
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=20, v2name=AES_GCM_16, blocksize=16, keydeflen=128
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=19, v2name=AES_GCM_12, blocksize=16, keydeflen=128
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=18, v2name=AES_GCM_8, blocksize=16, keydeflen=128
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE encrypt: v1id=13, v1name=OAKLEY_AES_CTR, v2id=13, v2name=AES_CTR, blocksize=16, keydeflen=128
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE encrypt: v1id=7, v1name=OAKLEY_AES_CBC, v2id=12, v2name=AES_CBC, blocksize=16, keydeflen=128
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=28, v2name=CHACHA20_POLY1305, blocksize=16, keydeflen=256
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE PRF: name=HMAC_MD5, hashlen=16
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE PRF: name=HMAC_SHA1, hashlen=20
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE PRF: name=HMAC_SHA2_256, hashlen=32
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE PRF: name=HMAC_SHA2_384, hashlen=48
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE PRF: name=HMAC_SHA2_512, hashlen=64
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE PRF: name=AES_XCBC, hashlen=16
Nov 12 16:04:20.838760 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE DH Key Exchange: name=MODP1536, bits=1536
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE DH Key Exchange: name=MODP2048, bits=2048
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE DH Key Exchange: name=MODP3072, bits=3072
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE DH Key Exchange: name=MODP4096, bits=4096
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE DH Key Exchange: name=MODP6144, bits=6144
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE DH Key Exchange: name=MODP8192, bits=8192
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE DH Key Exchange: name=DH19, bits=512
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE DH Key Exchange: name=DH20, bits=768
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE DH Key Exchange: name=DH21, bits=1056
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: algorithm IKE DH Key Exchange: name=DH31, bits=256
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: stats db_ops: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0}
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: Connection list:
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: Total IPsec connections: loaded 0, active 0
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: State Information: DDoS cookies not required, Accepting new IKE connections
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: IKE SAs: total(0), half-open(0), open(0), authenticated(0), anonymous(0)
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: IPsec SAs: total(0), authenticated(0), anonymous(0)
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]: Bare Shunt list:
Nov 12 16:04:20.839434 ip-10-0-15-154 NetworkManager[57645]:  
Nov 12 16:04:20.843256 ip-10-0-15-154 NetworkManager[57646]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:20.844348 ip-10-0-15-154 pluto[52789]: listening for IKE messages
Nov 12 16:04:20.845217 ip-10-0-15-154 NetworkManager[57647]: listening for IKE messages
Nov 12 16:04:20.844843 ip-10-0-15-154 pluto[52789]: loading secrets from "/etc/ipsec.secrets"
Nov 12 16:04:20.845582 ip-10-0-15-154 NetworkManager[57647]: loading secrets from "/etc/ipsec.secrets"
Nov 12 16:04:20.850149 ip-10-0-15-154 NetworkManager[57648]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:20.854289 ip-10-0-15-154 NetworkManager[57649]: ipsec addconn: duplicate key 'phase2alg' in conn 98317cf9-ebff-482f-86f0-88b8c0b1e751 while processing def 98317cf9-ebff-482f-86f0-88b8c0b1e751
Nov 12 16:04:20.854740 ip-10-0-15-154 NetworkManager[57649]: conn 98317cf9-ebff-482f-86f0-88b8c0b1e751 did not load properly
Nov 12 16:04:20.860244 ip-10-0-15-154 pluto[52789]: no connection or alias named "98317cf9-ebff-482f-86f0-88b8c0b1e751"'
Nov 12 16:04:20.860964 ip-10-0-15-154 NetworkManager[1144]: <warn>  [1762963460.8609] vpn[0x561cfd1bc180,98317cf9-ebff-482f-86f0-88b8c0b1e751,"hosta_conn"]: dbus: failure: connect-failed (1)
Nov 12 16:04:20.861002 ip-10-0-15-154 NetworkManager[1144]: <warn>  [1762963460.8609] vpn[0x561cfd1bc180,98317cf9-ebff-482f-86f0-88b8c0b1e751,"hosta_conn"]: dbus: failure: connect-failed (1)
Nov 12 16:04:20.865782 ip-10-0-15-154 NetworkManager[57652]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:20.866958 ip-10-0-15-154 NetworkManager[57655]: no connection or alias named "98317cf9-ebff-482f-86f0-88b8c0b1e751"'
Nov 12 16:04:22.070617 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963462.0705] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:23.297740 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963463.2977] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:24.548589 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963464.5485] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:24.901925 ip-10-0-15-154 kubenswrapper[2577]: I1112 16:04:24.901822    2577 ???:1] "http: TLS handshake error from 10.0.15.154:51386: EOF"
Nov 12 16:04:25.783489 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963465.7834] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:28.024564 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963468.0245] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:28.395341 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963468.3952] audit: op="connection-update" uuid="98317cf9-ebff-482f-86f0-88b8c0b1e751" name="hosta_conn" pid=57614 uid=0 result="success"
Nov 12 16:04:28.396201 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963468.3961] vpn[0x561cfd1bc410,98317cf9-ebff-482f-86f0-88b8c0b1e751,"hosta_conn"]: starting libreswan
Nov 12 16:04:28.396491 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963468.3964] audit: op="connection-activate" uuid="98317cf9-ebff-482f-86f0-88b8c0b1e751" name="hosta_conn" pid=57614 uid=0 result="success"
Nov 12 16:04:28.399831 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963468.3998] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:28.419608 ip-10-0-15-154 NetworkManager[57683]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:28.421159 ip-10-0-15-154 NetworkManager[57684]: using kernel interface: xfrm
Nov 12 16:04:28.421485 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.421534 ip-10-0-15-154 NetworkManager[57684]: interface lo [::1]:UDP/4500 (NAT)
Nov 12 16:04:28.421586 ip-10-0-15-154 NetworkManager[57684]: interface lo [::1]:UDP/500
Nov 12 16:04:28.421586 ip-10-0-15-154 NetworkManager[57684]: interface lo 127.0.0.1:UDP/4500 (NAT)
Nov 12 16:04:28.421586 ip-10-0-15-154 NetworkManager[57684]: interface lo 127.0.0.1:UDP/500
Nov 12 16:04:28.421586 ip-10-0-15-154 NetworkManager[57684]: interface br-ex 10.0.15.154:UDP/4500 (NAT)
Nov 12 16:04:28.421586 ip-10-0-15-154 NetworkManager[57684]: interface br-ex 10.0.15.154:UDP/500
Nov 12 16:04:28.421586 ip-10-0-15-154 NetworkManager[57684]: interface br-ex 169.254.0.2:UDP/4500 (NAT)
Nov 12 16:04:28.421586 ip-10-0-15-154 NetworkManager[57684]: interface br-ex 169.254.0.2:UDP/500
Nov 12 16:04:28.421586 ip-10-0-15-154 NetworkManager[57684]: interface ovn-k8s-mp0 10.128.2.2:UDP/4500 (NAT)
Nov 12 16:04:28.421586 ip-10-0-15-154 NetworkManager[57684]: interface ovn-k8s-mp0 10.128.2.2:UDP/500
Nov 12 16:04:28.421586 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.421586 ip-10-0-15-154 NetworkManager[57684]: fips mode=disabled;
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: SElinux=enabled
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: seccomp=disabled
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: config setup options:
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: configdir=/etc, configfile=/etc/ipsec.conf, secrets=/etc/ipsec.secrets, ipsecdir=/etc/ipsec.d
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: nssdir=/var/lib/ipsec/nss, dumpdir=/run/pluto, statsbin=unset
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: dnssec-rootkey-file=/var/lib/unbound/root.key, dnssec-trusted=<unset>
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: sbindir=/usr/sbin, libexecdir=/usr/libexec/ipsec
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: pluto_version=5.2, pluto_vendorid=OE-Libreswan-5.2
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: nhelpers=-1, uniqueids=yes, dnssec-enable=yes, shuntlifetime=900s, xfrmlifetime=30s
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: logfile='<syslog>', logappend=yes, logip=yes, audit-log=yes
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: ddos-cookies-threshold=25000, ddos-max-halfopen=50000, ddos-mode=auto, ikev1-policy=drop
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: ikebuf=0, msg_errqueue=yes, crl-strict=no, crlcheckinterval=0, listen=<any>, nflog-all=0
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: ocsp-enable=no, ocsp-strict=no, ocsp-timeout=2, ocsp-uri=<unset>
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: ocsp-trust-name=<unset>
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: ocsp-cache-size=1000, ocsp-cache-min-age=3600, ocsp-cache-max-age=86400, ocsp-method=get
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: global-redirect=no, global-redirect-to=<unset>
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: debug:
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: nat-traversal: keep-alive=20, nat-ikeport=4500
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: virtual-private (%priv):
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: Kernel algorithms supported:
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=3DES_CBC, keysizemin=192, keysizemax=192
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=AES_CBC, keysizemin=128, keysizemax=256
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=AES_CCM_12, keysizemin=128, keysizemax=256
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=AES_CCM_16, keysizemin=128, keysizemax=256
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=AES_CCM_8, keysizemin=128, keysizemax=256
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=AES_CTR, keysizemin=128, keysizemax=256
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=AES_GCM_12, keysizemin=128, keysizemax=256
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=AES_GCM_16, keysizemin=128, keysizemax=256
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=AES_GCM_8, keysizemin=128, keysizemax=256
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=CAMELLIA_CBC, keysizemin=128, keysizemax=256
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=CHACHA20_POLY1305, keysizemin=256, keysizemax=256
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=NULL, keysizemin=0, keysizemax=0
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm ESP encrypt: name=NULL_AUTH_AES_GMAC, keysizemin=128, keysizemax=256
Nov 12 16:04:28.421909 ip-10-0-15-154 NetworkManager[57684]: algorithm AH/ESP auth: name=AES_CMAC_96, key-length=128
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm AH/ESP auth: name=AES_XCBC_96, key-length=128
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm AH/ESP auth: name=HMAC_MD5_96, key-length=128
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm AH/ESP auth: name=HMAC_SHA1_96, key-length=160
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm AH/ESP auth: name=HMAC_SHA2_256_128, key-length=256
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm AH/ESP auth: name=HMAC_SHA2_256_TRUNCBUG, key-length=256
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm AH/ESP auth: name=HMAC_SHA2_384_192, key-length=384
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm AH/ESP auth: name=HMAC_SHA2_512_256, key-length=512
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm AH/ESP auth: name=NONE, key-length=0
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: IKE algorithms supported:
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE encrypt: v1id=5, v1name=OAKLEY_3DES_CBC, v2id=3, v2name=3DES, blocksize=8, keydeflen=192
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE encrypt: v1id=8, v1name=OAKLEY_CAMELLIA_CBC, v2id=23, v2name=CAMELLIA_CBC, blocksize=16, keydeflen=128
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=20, v2name=AES_GCM_16, blocksize=16, keydeflen=128
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=19, v2name=AES_GCM_12, blocksize=16, keydeflen=128
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=18, v2name=AES_GCM_8, blocksize=16, keydeflen=128
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE encrypt: v1id=13, v1name=OAKLEY_AES_CTR, v2id=13, v2name=AES_CTR, blocksize=16, keydeflen=128
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE encrypt: v1id=7, v1name=OAKLEY_AES_CBC, v2id=12, v2name=AES_CBC, blocksize=16, keydeflen=128
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=28, v2name=CHACHA20_POLY1305, blocksize=16, keydeflen=256
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE PRF: name=HMAC_MD5, hashlen=16
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE PRF: name=HMAC_SHA1, hashlen=20
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE PRF: name=HMAC_SHA2_256, hashlen=32
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE PRF: name=HMAC_SHA2_384, hashlen=48
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE PRF: name=HMAC_SHA2_512, hashlen=64
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE PRF: name=AES_XCBC, hashlen=16
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE DH Key Exchange: name=MODP1536, bits=1536
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE DH Key Exchange: name=MODP2048, bits=2048
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE DH Key Exchange: name=MODP3072, bits=3072
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE DH Key Exchange: name=MODP4096, bits=4096
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE DH Key Exchange: name=MODP6144, bits=6144
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE DH Key Exchange: name=MODP8192, bits=8192
Nov 12 16:04:28.423031 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE DH Key Exchange: name=DH19, bits=512
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE DH Key Exchange: name=DH20, bits=768
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE DH Key Exchange: name=DH21, bits=1056
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]: algorithm IKE DH Key Exchange: name=DH31, bits=256
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]: stats db_ops: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0}
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]: Connection list:
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]: Total IPsec connections: loaded 0, active 0
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]: State Information: DDoS cookies not required, Accepting new IKE connections
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]: IKE SAs: total(0), half-open(0), open(0), authenticated(0), anonymous(0)
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]: IPsec SAs: total(0), authenticated(0), anonymous(0)
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]: Bare Shunt list:
Nov 12 16:04:28.423619 ip-10-0-15-154 NetworkManager[57684]:  
Nov 12 16:04:28.427490 ip-10-0-15-154 NetworkManager[57685]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:28.428538 ip-10-0-15-154 pluto[52789]: listening for IKE messages
Nov 12 16:04:28.428856 ip-10-0-15-154 NetworkManager[57686]: listening for IKE messages
Nov 12 16:04:28.428755 ip-10-0-15-154 pluto[52789]: loading secrets from "/etc/ipsec.secrets"
Nov 12 16:04:28.429203 ip-10-0-15-154 NetworkManager[57686]: loading secrets from "/etc/ipsec.secrets"
Nov 12 16:04:28.433675 ip-10-0-15-154 NetworkManager[57687]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:28.438158 ip-10-0-15-154 NetworkManager[57688]: ipsec addconn: duplicate key 'phase2alg' in conn 98317cf9-ebff-482f-86f0-88b8c0b1e751 while processing def 98317cf9-ebff-482f-86f0-88b8c0b1e751
Nov 12 16:04:28.438664 ip-10-0-15-154 NetworkManager[57688]: conn 98317cf9-ebff-482f-86f0-88b8c0b1e751 did not load properly
Nov 12 16:04:28.443548 ip-10-0-15-154 pluto[52789]: no connection or alias named "98317cf9-ebff-482f-86f0-88b8c0b1e751"'
Nov 12 16:04:28.444292 ip-10-0-15-154 NetworkManager[1144]: <warn>  [1762963468.4442] vpn[0x561cfd1bc410,98317cf9-ebff-482f-86f0-88b8c0b1e751,"hosta_conn"]: dbus: failure: connect-failed (1)
Nov 12 16:04:28.444353 ip-10-0-15-154 NetworkManager[1144]: <warn>  [1762963468.4443] vpn[0x561cfd1bc410,98317cf9-ebff-482f-86f0-88b8c0b1e751,"hosta_conn"]: dbus: failure: connect-failed (1)
Nov 12 16:04:28.448733 ip-10-0-15-154 NetworkManager[57691]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:28.450026 ip-10-0-15-154 NetworkManager[57694]: no connection or alias named "98317cf9-ebff-482f-86f0-88b8c0b1e751"'
Nov 12 16:04:29.660650 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963469.6606] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:29.902241 ip-10-0-15-154 kubenswrapper[2577]: I1112 16:04:29.902203    2577 ???:1] "http: TLS handshake error from 10.0.15.154:51442: EOF"
Nov 12 16:04:30.907556 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963470.9075] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:32.133466 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963472.1334] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:33.366424 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963473.3663] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:33.599652 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963473.5996] checkpoint[0x561cfcf27950]: rollback of /org/freedesktop/NetworkManager/Checkpoint/1
Nov 12 16:04:33.603810 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963473.6037] audit: op="checkpoint-rollback" arg="/org/freedesktop/NetworkManager/Checkpoint/1" pid=57614 uid=0 result="success"
Nov 12 16:04:34.902104 ip-10-0-15-154 kubenswrapper[2577]: I1112 16:04:34.902069    2577 ???:1] "http: TLS handshake error from 10.0.15.154:39796: EOF"
Nov 12 16:04:36.369480 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963476.3694] audit: op="checkpoint-create" arg="/org/freedesktop/NetworkManager/Checkpoint/2" pid=57749 uid=0 result="success"
Nov 12 16:04:36.370548 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963476.3705] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/2" pid=57749 uid=0 result="success"
Nov 12 16:04:36.768801 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963476.7687] audit: op="connection-add" uuid="05d3e79f-4e11-4dd2-aadb-4f96bbd47c51" name="hosta_conn" pid=57749 uid=0 result="success"
Nov 12 16:04:36.769810 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963476.7697] vpn[0x561cfd1bc6a0,05d3e79f-4e11-4dd2-aadb-4f96bbd47c51,"hosta_conn"]: starting libreswan
Nov 12 16:04:36.770089 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963476.7700] audit: op="connection-activate" uuid="05d3e79f-4e11-4dd2-aadb-4f96bbd47c51" name="hosta_conn" pid=57749 uid=0 result="success"
Nov 12 16:04:36.773494 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963476.7734] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/2" pid=57749 uid=0 result="success"
Nov 12 16:04:36.790060 ip-10-0-15-154 NetworkManager[57756]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:36.791119 ip-10-0-15-154 NetworkManager[57757]: using kernel interface: xfrm
Nov 12 16:04:36.791119 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.791119 ip-10-0-15-154 NetworkManager[57757]: interface lo [::1]:UDP/4500 (NAT)
Nov 12 16:04:36.791119 ip-10-0-15-154 NetworkManager[57757]: interface lo [::1]:UDP/500
Nov 12 16:04:36.791119 ip-10-0-15-154 NetworkManager[57757]: interface lo 127.0.0.1:UDP/4500 (NAT)
Nov 12 16:04:36.791119 ip-10-0-15-154 NetworkManager[57757]: interface lo 127.0.0.1:UDP/500
Nov 12 16:04:36.791119 ip-10-0-15-154 NetworkManager[57757]: interface br-ex 10.0.15.154:UDP/4500 (NAT)
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: interface br-ex 10.0.15.154:UDP/500
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: interface br-ex 169.254.0.2:UDP/4500 (NAT)
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: interface br-ex 169.254.0.2:UDP/500
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: interface ovn-k8s-mp0 10.128.2.2:UDP/4500 (NAT)
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: interface ovn-k8s-mp0 10.128.2.2:UDP/500
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: fips mode=disabled;
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: SElinux=enabled
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: seccomp=disabled
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: config setup options:
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: configdir=/etc, configfile=/etc/ipsec.conf, secrets=/etc/ipsec.secrets, ipsecdir=/etc/ipsec.d
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: nssdir=/var/lib/ipsec/nss, dumpdir=/run/pluto, statsbin=unset
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: dnssec-rootkey-file=/var/lib/unbound/root.key, dnssec-trusted=<unset>
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: sbindir=/usr/sbin, libexecdir=/usr/libexec/ipsec
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: pluto_version=5.2, pluto_vendorid=OE-Libreswan-5.2
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: nhelpers=-1, uniqueids=yes, dnssec-enable=yes, shuntlifetime=900s, xfrmlifetime=30s
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: logfile='<syslog>', logappend=yes, logip=yes, audit-log=yes
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: ddos-cookies-threshold=25000, ddos-max-halfopen=50000, ddos-mode=auto, ikev1-policy=drop
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: ikebuf=0, msg_errqueue=yes, crl-strict=no, crlcheckinterval=0, listen=<any>, nflog-all=0
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: ocsp-enable=no, ocsp-strict=no, ocsp-timeout=2, ocsp-uri=<unset>
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: ocsp-trust-name=<unset>
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: ocsp-cache-size=1000, ocsp-cache-min-age=3600, ocsp-cache-max-age=86400, ocsp-method=get
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: global-redirect=no, global-redirect-to=<unset>
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: debug:
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: nat-traversal: keep-alive=20, nat-ikeport=4500
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: virtual-private (%priv):
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: Kernel algorithms supported:
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=3DES_CBC, keysizemin=192, keysizemax=192
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=AES_CBC, keysizemin=128, keysizemax=256
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=AES_CCM_12, keysizemin=128, keysizemax=256
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=AES_CCM_16, keysizemin=128, keysizemax=256
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=AES_CCM_8, keysizemin=128, keysizemax=256
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=AES_CTR, keysizemin=128, keysizemax=256
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=AES_GCM_12, keysizemin=128, keysizemax=256
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=AES_GCM_16, keysizemin=128, keysizemax=256
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=AES_GCM_8, keysizemin=128, keysizemax=256
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=CAMELLIA_CBC, keysizemin=128, keysizemax=256
Nov 12 16:04:36.791548 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=CHACHA20_POLY1305, keysizemin=256, keysizemax=256
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=NULL, keysizemin=0, keysizemax=0
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm ESP encrypt: name=NULL_AUTH_AES_GMAC, keysizemin=128, keysizemax=256
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm AH/ESP auth: name=AES_CMAC_96, key-length=128
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm AH/ESP auth: name=AES_XCBC_96, key-length=128
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm AH/ESP auth: name=HMAC_MD5_96, key-length=128
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm AH/ESP auth: name=HMAC_SHA1_96, key-length=160
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm AH/ESP auth: name=HMAC_SHA2_256_128, key-length=256
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm AH/ESP auth: name=HMAC_SHA2_256_TRUNCBUG, key-length=256
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm AH/ESP auth: name=HMAC_SHA2_384_192, key-length=384
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm AH/ESP auth: name=HMAC_SHA2_512_256, key-length=512
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm AH/ESP auth: name=NONE, key-length=0
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: IKE algorithms supported:
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE encrypt: v1id=5, v1name=OAKLEY_3DES_CBC, v2id=3, v2name=3DES, blocksize=8, keydeflen=192
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE encrypt: v1id=8, v1name=OAKLEY_CAMELLIA_CBC, v2id=23, v2name=CAMELLIA_CBC, blocksize=16, keydeflen=128
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=20, v2name=AES_GCM_16, blocksize=16, keydeflen=128
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=19, v2name=AES_GCM_12, blocksize=16, keydeflen=128
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=18, v2name=AES_GCM_8, blocksize=16, keydeflen=128
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE encrypt: v1id=13, v1name=OAKLEY_AES_CTR, v2id=13, v2name=AES_CTR, blocksize=16, keydeflen=128
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE encrypt: v1id=7, v1name=OAKLEY_AES_CBC, v2id=12, v2name=AES_CBC, blocksize=16, keydeflen=128
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=28, v2name=CHACHA20_POLY1305, blocksize=16, keydeflen=256
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE PRF: name=HMAC_MD5, hashlen=16
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE PRF: name=HMAC_SHA1, hashlen=20
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE PRF: name=HMAC_SHA2_256, hashlen=32
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE PRF: name=HMAC_SHA2_384, hashlen=48
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE PRF: name=HMAC_SHA2_512, hashlen=64
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE PRF: name=AES_XCBC, hashlen=16
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE DH Key Exchange: name=MODP1536, bits=1536
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE DH Key Exchange: name=MODP2048, bits=2048
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE DH Key Exchange: name=MODP3072, bits=3072
Nov 12 16:04:36.792615 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE DH Key Exchange: name=MODP4096, bits=4096
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE DH Key Exchange: name=MODP6144, bits=6144
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE DH Key Exchange: name=MODP8192, bits=8192
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE DH Key Exchange: name=DH19, bits=512
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE DH Key Exchange: name=DH20, bits=768
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE DH Key Exchange: name=DH21, bits=1056
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: algorithm IKE DH Key Exchange: name=DH31, bits=256
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: stats db_ops: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0}
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: Connection list:
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: Total IPsec connections: loaded 0, active 0
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: State Information: DDoS cookies not required, Accepting new IKE connections
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: IKE SAs: total(0), half-open(0), open(0), authenticated(0), anonymous(0)
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: IPsec SAs: total(0), authenticated(0), anonymous(0)
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]: Bare Shunt list:
Nov 12 16:04:36.793500 ip-10-0-15-154 NetworkManager[57757]:  
Nov 12 16:04:36.797071 ip-10-0-15-154 NetworkManager[57758]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:36.798178 ip-10-0-15-154 pluto[52789]: listening for IKE messages
Nov 12 16:04:36.798447 ip-10-0-15-154 pluto[52789]: loading secrets from "/etc/ipsec.secrets"
Nov 12 16:04:36.799450 ip-10-0-15-154 NetworkManager[57759]: listening for IKE messages
Nov 12 16:04:36.799450 ip-10-0-15-154 NetworkManager[57759]: loading secrets from "/etc/ipsec.secrets"
Nov 12 16:04:36.803297 ip-10-0-15-154 NetworkManager[57760]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:36.807864 ip-10-0-15-154 NetworkManager[57761]: ipsec addconn: duplicate key 'phase2alg' in conn 05d3e79f-4e11-4dd2-aadb-4f96bbd47c51 while processing def 05d3e79f-4e11-4dd2-aadb-4f96bbd47c51
Nov 12 16:04:36.808231 ip-10-0-15-154 NetworkManager[57761]: conn 05d3e79f-4e11-4dd2-aadb-4f96bbd47c51 did not load properly
Nov 12 16:04:36.813950 ip-10-0-15-154 pluto[52789]: no connection or alias named "05d3e79f-4e11-4dd2-aadb-4f96bbd47c51"'
Nov 12 16:04:36.814740 ip-10-0-15-154 NetworkManager[1144]: <warn>  [1762963476.8147] vpn[0x561cfd1bc6a0,05d3e79f-4e11-4dd2-aadb-4f96bbd47c51,"hosta_conn"]: dbus: failure: connect-failed (1)
Nov 12 16:04:36.815258 ip-10-0-15-154 NetworkManager[1144]: <warn>  [1762963476.8152] vpn[0x561cfd1bc6a0,05d3e79f-4e11-4dd2-aadb-4f96bbd47c51,"hosta_conn"]: dbus: failure: connect-failed (1)
Nov 12 16:04:36.819158 ip-10-0-15-154 NetworkManager[57764]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:36.820300 ip-10-0-15-154 NetworkManager[57767]: no connection or alias named "05d3e79f-4e11-4dd2-aadb-4f96bbd47c51"'
Nov 12 16:04:38.019648 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963478.0196] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/2" pid=57749 uid=0 result="success"
Nov 12 16:04:39.258595 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963479.2585] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/2" pid=57749 uid=0 result="success"
Nov 12 16:04:39.901434 ip-10-0-15-154 kubenswrapper[2577]: I1112 16:04:39.901376    2577 ???:1] "http: TLS handshake error from 10.0.15.154:39860: EOF"
Nov 12 16:04:40.497029 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963480.4969] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/2" pid=57749 uid=0 result="success"
Nov 12 16:04:42.010122 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963482.0100] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/2" pid=57749 uid=0 result="success"
Nov 12 16:04:44.239757 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963484.2397] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/2" pid=57749 uid=0 result="success"
Nov 12 16:04:44.618290 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963484.6182] audit: op="connection-update" uuid="05d3e79f-4e11-4dd2-aadb-4f96bbd47c51" name="hosta_conn" pid=57749 uid=0 result="success"
Nov 12 16:04:44.619124 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963484.6191] vpn[0x561cfd1bc930,05d3e79f-4e11-4dd2-aadb-4f96bbd47c51,"hosta_conn"]: starting libreswan
Nov 12 16:04:44.619469 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963484.6194] audit: op="connection-activate" uuid="05d3e79f-4e11-4dd2-aadb-4f96bbd47c51" name="hosta_conn" pid=57749 uid=0 result="success"
Nov 12 16:04:44.622630 ip-10-0-15-154 NetworkManager[1144]: <info>  [1762963484.6226] audit: op="checkpoint-adjust-rollback-timeout" arg="/org/freedesktop/NetworkManager/Checkpoint/2" pid=57749 uid=0 result="success"
Nov 12 16:04:44.639450 ip-10-0-15-154 NetworkManager[57850]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:44.640500 ip-10-0-15-154 NetworkManager[57851]: using kernel interface: xfrm
Nov 12 16:04:44.640500 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.640500 ip-10-0-15-154 NetworkManager[57851]: interface lo [::1]:UDP/4500 (NAT)
Nov 12 16:04:44.640500 ip-10-0-15-154 NetworkManager[57851]: interface lo [::1]:UDP/500
Nov 12 16:04:44.640500 ip-10-0-15-154 NetworkManager[57851]: interface lo 127.0.0.1:UDP/4500 (NAT)
Nov 12 16:04:44.640500 ip-10-0-15-154 NetworkManager[57851]: interface lo 127.0.0.1:UDP/500
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: interface br-ex 10.0.15.154:UDP/4500 (NAT)
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: interface br-ex 10.0.15.154:UDP/500
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: interface br-ex 169.254.0.2:UDP/4500 (NAT)
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: interface br-ex 169.254.0.2:UDP/500
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: interface ovn-k8s-mp0 10.128.2.2:UDP/4500 (NAT)
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: interface ovn-k8s-mp0 10.128.2.2:UDP/500
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: fips mode=disabled;
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: SElinux=enabled
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: seccomp=disabled
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: config setup options:
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: configdir=/etc, configfile=/etc/ipsec.conf, secrets=/etc/ipsec.secrets, ipsecdir=/etc/ipsec.d
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: nssdir=/var/lib/ipsec/nss, dumpdir=/run/pluto, statsbin=unset
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: dnssec-rootkey-file=/var/lib/unbound/root.key, dnssec-trusted=<unset>
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: sbindir=/usr/sbin, libexecdir=/usr/libexec/ipsec
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: pluto_version=5.2, pluto_vendorid=OE-Libreswan-5.2
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: nhelpers=-1, uniqueids=yes, dnssec-enable=yes, shuntlifetime=900s, xfrmlifetime=30s
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: logfile='<syslog>', logappend=yes, logip=yes, audit-log=yes
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: ddos-cookies-threshold=25000, ddos-max-halfopen=50000, ddos-mode=auto, ikev1-policy=drop
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: ikebuf=0, msg_errqueue=yes, crl-strict=no, crlcheckinterval=0, listen=<any>, nflog-all=0
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: ocsp-enable=no, ocsp-strict=no, ocsp-timeout=2, ocsp-uri=<unset>
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: ocsp-trust-name=<unset>
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: ocsp-cache-size=1000, ocsp-cache-min-age=3600, ocsp-cache-max-age=86400, ocsp-method=get
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: global-redirect=no, global-redirect-to=<unset>
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: debug:
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: nat-traversal: keep-alive=20, nat-ikeport=4500
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: virtual-private (%priv):
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: Kernel algorithms supported:
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=3DES_CBC, keysizemin=192, keysizemax=192
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=AES_CBC, keysizemin=128, keysizemax=256
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=AES_CCM_12, keysizemin=128, keysizemax=256
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=AES_CCM_16, keysizemin=128, keysizemax=256
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=AES_CCM_8, keysizemin=128, keysizemax=256
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=AES_CTR, keysizemin=128, keysizemax=256
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=AES_GCM_12, keysizemin=128, keysizemax=256
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=AES_GCM_16, keysizemin=128, keysizemax=256
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=AES_GCM_8, keysizemin=128, keysizemax=256
Nov 12 16:04:44.640885 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=CAMELLIA_CBC, keysizemin=128, keysizemax=256
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=CHACHA20_POLY1305, keysizemin=256, keysizemax=256
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=NULL, keysizemin=0, keysizemax=0
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm ESP encrypt: name=NULL_AUTH_AES_GMAC, keysizemin=128, keysizemax=256
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm AH/ESP auth: name=AES_CMAC_96, key-length=128
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm AH/ESP auth: name=AES_XCBC_96, key-length=128
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm AH/ESP auth: name=HMAC_MD5_96, key-length=128
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm AH/ESP auth: name=HMAC_SHA1_96, key-length=160
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm AH/ESP auth: name=HMAC_SHA2_256_128, key-length=256
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm AH/ESP auth: name=HMAC_SHA2_256_TRUNCBUG, key-length=256
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm AH/ESP auth: name=HMAC_SHA2_384_192, key-length=384
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm AH/ESP auth: name=HMAC_SHA2_512_256, key-length=512
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm AH/ESP auth: name=NONE, key-length=0
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: IKE algorithms supported:
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE encrypt: v1id=5, v1name=OAKLEY_3DES_CBC, v2id=3, v2name=3DES, blocksize=8, keydeflen=192
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE encrypt: v1id=8, v1name=OAKLEY_CAMELLIA_CBC, v2id=23, v2name=CAMELLIA_CBC, blocksize=16, keydeflen=128
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=20, v2name=AES_GCM_16, blocksize=16, keydeflen=128
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=19, v2name=AES_GCM_12, blocksize=16, keydeflen=128
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=18, v2name=AES_GCM_8, blocksize=16, keydeflen=128
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE encrypt: v1id=13, v1name=OAKLEY_AES_CTR, v2id=13, v2name=AES_CTR, blocksize=16, keydeflen=128
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE encrypt: v1id=7, v1name=OAKLEY_AES_CBC, v2id=12, v2name=AES_CBC, blocksize=16, keydeflen=128
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE encrypt: v1id=-1, v1name=n/a, v2id=28, v2name=CHACHA20_POLY1305, blocksize=16, keydeflen=256
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE PRF: name=HMAC_MD5, hashlen=16
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE PRF: name=HMAC_SHA1, hashlen=20
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE PRF: name=HMAC_SHA2_256, hashlen=32
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE PRF: name=HMAC_SHA2_384, hashlen=48
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE PRF: name=HMAC_SHA2_512, hashlen=64
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE PRF: name=AES_XCBC, hashlen=16
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE DH Key Exchange: name=MODP1536, bits=1536
Nov 12 16:04:44.642079 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE DH Key Exchange: name=MODP2048, bits=2048
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE DH Key Exchange: name=MODP3072, bits=3072
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE DH Key Exchange: name=MODP4096, bits=4096
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE DH Key Exchange: name=MODP6144, bits=6144
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE DH Key Exchange: name=MODP8192, bits=8192
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE DH Key Exchange: name=DH19, bits=512
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE DH Key Exchange: name=DH20, bits=768
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE DH Key Exchange: name=DH21, bits=1056
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: algorithm IKE DH Key Exchange: name=DH31, bits=256
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: stats db_ops: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0}
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: Connection list:
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: Total IPsec connections: loaded 0, active 0
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: State Information: DDoS cookies not required, Accepting new IKE connections
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: IKE SAs: total(0), half-open(0), open(0), authenticated(0), anonymous(0)
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: IPsec SAs: total(0), authenticated(0), anonymous(0)
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]: Bare Shunt list:
Nov 12 16:04:44.642992 ip-10-0-15-154 NetworkManager[57851]:  
Nov 12 16:04:44.644715 ip-10-0-15-154 NetworkManager[57852]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:44.645649 ip-10-0-15-154 pluto[52789]: listening for IKE messages
Nov 12 16:04:44.645870 ip-10-0-15-154 pluto[52789]: loading secrets from "/etc/ipsec.secrets"
Nov 12 16:04:44.646067 ip-10-0-15-154 NetworkManager[57853]: listening for IKE messages
Nov 12 16:04:44.646067 ip-10-0-15-154 NetworkManager[57853]: loading secrets from "/etc/ipsec.secrets"
Nov 12 16:04:44.650591 ip-10-0-15-154 NetworkManager[57854]: WARNING: ipsec auto has been deprecated
Nov 12 16:04:44.655066 ip-10-0-15-154 NetworkManager[57855]: ipsec addconn: duplicate key 'phase2alg' in conn 05d3e79f-4e11-4dd2-aadb-4f96bbd47c51 while processing def 05d3e79f-4e11-4dd2-aadb-4f96bbd47c51
Nov 12 16:04:44.655460 ip-10-0-15-154 NetworkManager[57855]: conn 05d3e79f-4e11-4dd2-aadb-4f96bbd47c51 did not load properly
Nov 12 16:04:44.661945 ip-10-0-15-154 pluto[52789]: no connection or alias named "05d3e79f-4e11-4dd2-aadb-4f96bbd47c51"'
Nov 12 16:04:44.662885 ip-10-0-15-154 NetworkManager[1144]: <warn>  [1762963484.6628] vpn[0x561cfd1bc930,05d3e79f-4e11-4dd2-aadb-4f96bbd47c51,"hosta_conn"]: dbus: failure: connect-failed (1)
Nov 12 16:04:44.663017 ip-10-0-15-154 NetworkManager[1144]: <warn>  [1762963484.6630] vpn[0x561cfd1bc930,05d3e79f-4e11-4dd2-aadb-4f96bbd47c51,"hosta_conn"]: dbus: failure: connect-failed (1)