Bounded Flow Recording and Firewall Enforcement in Vessel Networks
A shipboard gateway design review revealed how nftables dynamic set limits could drop permitted traffic. This article examines how separating flow recording from enforcement, measuring missing evidence, and testing rule structure can preserve firewall policy decisions across shipboard network zones.