Easy question here I think.
When a packet arrives, for session lookup, it uses Source/Dest IP and Port, as well as the ingress interface.
Is the ingress interface used to match other sessions tied to that interface?
Or is the source interface used to match the zone it's attached to, then are all the sessions for that particular zone looked up?
I'm trying to understand how it deals with asymmetric routing between interfaces in the same zone. Is there an exception for OSPF with ECMP?