I thought I knew how it all worked, because after all I once used ebtables and ipchains to build a dual-homed linux gateway back before that was a thing (marking packets was key to everything)...but nope.

Thanks for sharing this!