Vlad Buslov <vladbu@xxxxxxxxxx> wrote: > The change will also enable early dropping offloaded non-ASSURED > connections for all other protocols though. But I don't think we support that. act_ct supports offload of non-assured (unidirectional) UDP. But TCP needs to have seen two-way communication. So, AFAICT the check isn't needed.