There was one bug for a while where IPSec would not handle TCP packets[0]. This was a big one since sending TCP packets over an IPSec tunnel is a somewhat comm

There was one bug for a while where IPSec would not handle TCP packets[0]. This was a big one since sending TCP packets over an IPSec tunnel is a somewhat common scenario. I had to keep an old kernel for quite a while before that one was fixed. It seems that a lot of the quality control happens with the distributions, not with the upstream software itself. I doubt that SLES would have seen this bug, but because I was running Tumbleweed I have to expect breakage like that. [0] http://lkml.iu.edu/hypermail/linux/kernel/1704.3/02043.html http://lkml.iu.edu/hypermail/linux/kernel/1704.3/02043.html