ipsec tweaks for stability ... hopefully....

files/ipsec.conf.wit

@@ -6,10 +6,11 @@ config setup
 conn %default
     #keyexchange = ikev2
     keyingtries = %forever
+    mobike = no
     dpdtimeout = 10
     dpddelay = 2
     dpdaction = hold
-    #closeaction = none
+    #closeaction = clear
     #rekeyfuzz = 100%
     ikelifetime = 4h
     margintime = 12m

files/wit-logging.conf

@@ -2,7 +2,20 @@ charon {
     install_routes = no
     install_virtual_ip = no
     interfaces_use = lo
+
     make_before_break = yes
+    delete_rekeyed = yes
+    delete_rekeyed_delay = 10
+
+    threads = 32
+    processor {
+        priority_threads {
+            critical = 2
+            high = 4
+            medium = 4
+        }
+    }
+
     syslog {
         auth {
             ike_name = yes