Actually seems I we fixed second issue in our setup with conntrack-sync disable-external-cache. And now our HA pair works as active-active with asymmetric traffic (at least when I had tested it yesterday I didn’t notice any issues with traffic).
Have found topic with similar issue (Question regarding conntrack-sync - #4 by Apachez) and the answer from it helped me as well.
3 Likes