IPSec is one of the few instances where I have encountered consistent ( irregular ) kernel panics and when a panic ensues from a containerized app.. it is of course the 'host' kernel that is panicking. So all your containers are hosed.

I only run VPNs through virtualized kernel instances now; if they fail, the hypervisor restarts them. Nothing else affected.