# Multi-WAN on possibly-shared subnets: answer ARP only for the incoming iface,
# announce the best local source — avoids ARP flux between eth/wifi WANs.
net.ipv4.conf.all.arp_ignore=1
net.ipv4.conf.all.arp_announce=2