> > It could be different scenario. I was expecting consistency in UDP packet > distribution is a requirement, but I understood goal at this stage is > to ensure packets are not dropped while dealing with clash resolution. > > I have applied Florian's patch to nf.git, thanks. Is there a workaround I can apply in the meantime? kernels fixes take a long time to be on users' distros and I have continuous reports about this problem. I was thinking that I can track the tuples in userspace and hold the duplicate for some time, but I'm not sure this will completely solve the problem and I want to consider this as a last resort. Is there any feature in nftables that can help? any ideas/suggestions I can explore?
