[strongSwan] Stroke self-DoS

[Simon T]

Hi,

Running the below command on a tunnel where the other endpoint isn't
responding results in an explosion of CHILD_CREATE tasks.

while true; do ipsec stroke up-nb tun; done

Leave the command running for a couple hours, ipsec statusall is full
of CHILD_CREATEs. Is there a way to prevent Strongswan from creating
new CHILD_CREATE tasks if the task already exists for the tunnel?

With tunnel config:

conn tun
ikelifetime=14400s
keylife=10800s
rekeymargin=600s
keyingtries=%forever
keyexchange=ikev2
authby=secret
ike=aes256-sha256-modp1536!
esp=aes256-sha256-modp1536!
auto=start
forceencaps=no
left=10.0.0.1
leftfirewall=no
leftid=
leftsubnet=192.168.38.0/24
rekeymargin=600s
right=1.1.1.1
rightfirewall=no
rightid=
rightsubnet=192.168.100.0/24

Regards,

Simon