nft --check accepted the candidate ruleset reproduced for this article and left the active stateless ruleset hash unchanged. That was only the first result. After one real load, an HTTP probe to port 18192 returned 200, the same probe to port 18193 was rejected, and the intended ...