Hi Mike, > We have a customer who wants to avoid new SA Connections when the server > has high processor load. > > Is there a known strategy to realize those requirements?
See [1] for the currently available options to limit new SAs. Regards, Tobias [1] https://wiki.strongswan.org/projects/strongswan/wiki/JobPriority#IKE_SA_INIT-dropping