Upgraded to 7.1rc4, IPSec hardware acceleration for aes-256 gcm is still not working on x86_64 CHR and worked just fine with the same config on 6.48.4, same virtualization environment.

Does HW accelerated IPSec suppose to work on 7.1rc3 / Intel CHR combo? When I upgraded from 6.48 I lost HW acceleration flag for aes-256-gcm tunnels that were offloaded before... How did you have hardware offload on CHR? It is virtual - there is nothing to offload to. Probably the HW acceleration f...

Does HW accelerated IPSec suppose to work on 7.1rc3 / Intel CHR combo? When I upgraded from 6.48 I lost HW acceleration flag for aes-256-gcm tunnels that were offloaded before...

Is there a particular reason to apply ingress filtering to access ports when "admit only untagged" is set? On the surface, igress filtering looks unnecessary here.