# /etc/strongswan.conf - strongSwan configuration file charon-systemd { load = random nonce openssl pem pkcs1 revocation curl kernel-netlink socket-default updown vici # disable DoS protection as the initiator will create a lot of IKE_SAs in this scenario dos_protection = no }