There seems to be issues in Harvester 1.1.1 with fragmented IPV6 ICMP/UDP traffic where the traffic gets reassembled on the linux bridge on its way out - I created https://github.com/harvester/harvester/issues/3476 for it now that I finally think I understand at least what happens, even if I’m unclear on the netfilter/iptables part of the story