When the Symphony proxy intercepts a packet, the iptables NAT rules rewrite the original destination address, effectively masking it. As a result, the proxy cannot determine where to forward the packet.

Current workaround:
We embed the original destination IP address in the first packet of each RPC—specifically, before the service and method name fields.

A better approach would be to use TProxy, which preserves the original destination address during interception, allowing the proxy to forward packets correctly without relying on embedded metadata.