we got the error message 'No buffer space available' when trying to connect to remote services over the ipsec network, but it worked over the host network just fine - cilium was reporting the health endpoint on the worker node was healthy, but the overlay network target was unhealthy over the ipsec network