Update from my side: I finally got some time to set up my VM test bed, but couldn’t reproduce the problem.
I used my backup ISO from Core 152 to create a VirtualBox VM with Green connected to an internal (simulated) network and Red connected to a normal NAT connection. I then connected a regular Ubuntu VM to the internal network so that my IPFire VM was in its path to the Internet, and attempted a Meet call (to my phone), which was successful. I then upgraded the IPFire VM to 153 and tried again, and the Meet call was successful again. I tried again after adding Guardian, but got the same results.
I’m still on Core 152 on my actual firewall machine right now, but I’ll try the upgrade again some time soon and see if I still have the issue. I’ll also keep the VMs around for a bit, so if you have a suggestion on something to try with them, I can give it a shot.
For the moment, here are the PCAP files of the DTLS failures I was seeing when I was running Core 153, and a success case after rolling back to Core 152. (These files have been scrubbed/anonymized with TraceWrangler. If you are an IPFire developer and need to see the originals, feel free to contact me directly through email.) If needed, I can attach them to the Bugzilla ticket as well - let me know if that would be helpful.
153_DTLS_Failure_PCAPs.zip (7.0 KB)
Thanks for everyone’s attention on this so far.