This is actually pretty easy to reproduce on a DVR setup:
- associate a floating IP
- dis-associated it
- re-associate it
Since the fip namespace doesn't get destroyed on the dis-associate, the next associated will call the namespace creation code, which will add the rule again.
This is actually pretty easy to reproduce on a DVR setup:
- associate a floating IP
- dis-associated it
- re-associate it
Since the fip namespace doesn't get destroyed on the dis-associate, the next associated will call the namespace creation code, which will add the rule again.
I'll look into it some more.