We started to implement IPsec on cloud ECS instances and after couple days of working it stopped to work. Debugged it and seemed that packets with source and destination UDP 500 port are filtered. After that tried to change my source IP in Local Datacenter side - and it started to work. Don't know how long it will. Could it be due to whole China policy to block VPNs in 2018 ? Thanks