As part of FQ-PIE and CAKE we need a more recent kernel to incorporate the official patches from the corresponding master branches to our fork.
Testing shows that DMVPN, L2TP ipsec works with 4.18. At least L2TP ipsec was an issue when updating to 4.14.