Hi All!
We have been dealing with a memory leak in the kernel for
IKEv2 and IPSec connections relating to a memory leak in xfrm
support on both el8 and el7. The symptom of this issue is that
memory will continue allocating in slab over time making a box
oom after too many connections.
As per some external discussions I am sending the patch +
bug report on to this list. It has already been accepted into
upstream kernels (4.19 included) and is a pretty straight
forward backport. I have tested and installed this on a few
centos8 systems to validate that this does indeed solve the
memory leak issue.
rbz# 1780470