Hi,
By enabling cluster firewall (we have one node), we can't do asymmetric bgp routing in a VM, since Proxmox drops the invalid packets (even when firewall is disabled for a VM)
We want to have firewall enabled, but since invalid packets are only forwarded towards the bridge and not the VM...