Hi All! We have been dealing with a memory leak in the kernel for IKEv2 and IPSec connections relating to a memory leak in xfrm support on both el8 and el7. The symptom of this issue is that memory will continue allocating in slab over time making a box oom after too many connections. As per some external discussions I am sending the patch + bug report on to this list. It has already been accepted into upstream kernels (4.19 included) and is a pretty straight forward backport. I have tested and installed this on a few centos8 systems to validate that this does indeed solve the memory leak issue. rbz# 1780470 -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos-devel/attachments/20191212/28479f8b/attachment-0007.html> -------------- next part -------------- A non-text attachment was scrubbed... Name: xfrm_fix_memleak.patch Type: text/x-patch Size: 1354 bytes Desc: not available URL: <http://lists.centos.org/pipermail/centos-devel/attachments/20191212/28479f8b/attachment-0007.bin>