nftables.conf:
==> same on all nodes but the outbound external IPI also tried with the external vrrp vip itself but that won't change anything, as we're considering inbound traffic fail-over issue.
keepalived.conf: ... ==> same on all nodes, letting vrrp do its own election...
conntrackd.conf:
==> same on all nodes but the UDP IPv4_address bind and destinations.