> Sometimes during the test, I also see many "nf_conntrack: table full, > dropping > packet" messages on the host system.
First, increase conntrack table size with the following sysctl net.netfilter.nf_conntrack_max=655360 run your test again and report the reslut here Baptiste
