strongSwan

You are right, my attempt to solve this problem (commit:05ca56558) was insufficient. As you correctly state all open PF_KEY sockets receive messages sent by the kernel. An earlier approach was to make starter multi-threaded, thus, enabling it to read from these sockets. Unfortunately, this lead to strange effects on certain systems. Since starter uses the kernel plugins only to flush the kernel's SAD and SPD entries when it shuts down they don't actually need to be loaded during its whole runtime. The attached patch changes starter to do so, i.e. load the plugins only when needed and unload them directly afterwards.