Also since CGNAT is used dont forget to tweak the conntrack tables size preferly 1:1 hash/bucket ratio (for performance).
Edit: Also consider/test these optimizations and see which one will improve your situation:
Also since CGNAT is used dont forget to tweak the conntrack tables size preferly 1:1 hash/bucket ratio (for performance).
Edit: Also consider/test these optimizations and see which one will improve your situation: