Why can’t they append the packet with header that tears off on ingress and has a New one attached before egress?
Eliminates inspection, stateful or otherwise
Just thinking outloud ....
I don’t understand why they couldn’t do that either. Above my paygrade, V, sorry!