In my case krb5kdc ist running out of leck mich, cause the host system hasn’t realy enough system resources. The correct thing to do is adjust net.ipv4.tcp_max_syn_backlog to a high enough value that it no longer fires this warning. You will probably also want to adjust the TCP stack in general to have more memory.