> You mean using TPROXY instead of REDIRECT, right? I mean we had this usecase originally with TPROXY. So that should work. Yes, I got them mixed up, thanks. > Open multiple ports with the proxy :) I had considered this but the issue is we need to accept traffic on every port. We could open more than a single port to redirect to (say 10 preallocated ports) to make it less likely to occur, but that seems to just mask the problem rather than resolve it entirely.