some modules required by strongswan are missing in current 4.4.194 kernel (ip rule doesn't work) https://docs.strongswan.org/docs/5.9/install/kernelModules.html