conntrackd master-master IPv4/IPv6 configuration order

	Hello, netfilter users,

I plan to deploy a pair of Linux routers/firewalls with state data
synchronized using conntrackd. Unlike my previous deployments, I would
like to use both routers at the same time:

one router routing IPv4 traffic and acting as a standby for IPv6 traffic,
and another one routing IPv6 traffic and acting as a standby for IPv4 traffic.

Can I use conntrackd to synchronize the state data between these
routers? I am not sure which commands should I run at takover time
(as described in conntrack-tools/doc/sync/primary-backup.sh).

Or maybe I should run two instances of conntrackd on each node, one for
synchronizing IPv4 by default in one direction, and other one for IPv6
by default in the opposite direction, and having dedicated scripts
for promoting to master/demoting to standby/starting up for IPv4 and IPv6.

And two separate conntrackd configs filtering out the unwanted L3 protocol
by universal prefix address:

        Filter From Kernelspace {
		Address Ignore { IPv4_address 0.0.0.0/0 }
                # or Address Ignore { IPv6_address ::/0 }
		...
	}

How would you recommend to do this? Thanks!

-Yenya

-- 
| Jan "Yenya" Kasprzak <kas at {fi.muni.cz - work | yenya.net - private}> |
| https://www.fi.muni.cz/~kas/                        GPG: 4096R/A45477D5 |
    I don't like Python; its lack of inline, anonymous, multi-statement
    functions makes me sad.                                --Eric Wastl