Comment 7 for bug 1478925

ouch, this is going to be a bit painful to fix.

The issue is that when two instances are on the same node, a connection between them shares a conntrack entry. As one side sends the RST, conntrack immediately destroys the entry. Then when it comes time to match the entry on the other side, there is no longer an entry so it is dropped as invalid.