pfSense

On a 23.05.1 system with many IPsec tunnels, reloading the filter can take over 5 minutes. This results in very slow GUI performance when editing tunnels and occasional nginx timeouts. I've replicated the issue on a system with 87 tunnels each with one phase 2 entry. Among the phase 2's, there are 42 using VTI and 45 using tunnel mode. Each VTI has an associated interface and gateway.

The system logs show occurrences of:

sonewconn: pcb 0xfffff80018f57400 (local:/var/run/charon.vici): Listen queue overflow: 5 already in queue awaiting acceptance (35 occurrences), euid 0, rgid 0, jail 0