On Fri, 3 May 2024 11:11:23 +1000 David Gibson <david(a)gibson.dropbear.id.au> wrote:Currently we always deliver inbound TCP packets to the guest's most recent observed IP address. This has the odd side effect that if the guest changes its IP address with active TCP connections we might deliver packets from old connections to the new address. That won't work; it will will probably result in an RST from the guest. Worse,s/will will/will/ ...if I recall correctly, that was actually working, as long as we don't swap link-local with global unicast addresses (hence those conditions sprinkled all over the place). But it doesn't matter in any case, this is surely the way forward. -- Stefano