If a VMI is created without SG/network-policy refs, then policy is implicitly disabled on that VMI. It is then seen that for sessions originated from that VMI, no flows are created in vRouter. This will break several use cases that rely on the creation/presence of a flow.
However, if there are multiple paths back to the source (ecmp), then flow are created, even though policy is implicitly disabled.
The expectation is that only if the 'policy disable' flag is checked on the VMI should flow creation be disabled. In all other scenarios, flows should be created.
If a VMI is created without SG/network-policy refs, then policy is implicitly disabled on that VMI. It is then seen that for sessions originated from that VMI, no flows are created in vRouter. This will break several use cases that rely on the creation/presence of a flow.
However, if there are multiple paths back to the source (ecmp), then flow are created, even though policy is implicitly disabled.
The expectation is that only if the 'policy disable' flag is checked on the VMI should flow creation be disabled. In all other scenarios, flows should be created.