With the new changes, CR vserver will pick up traffic only if the source IP is 1.1.1.1.
All the remaining traffic on port 80 will be handled by “set ns param”. So it will not go through the CR vserver.
I noticed that the client IPs mentioned earlier were in 203.150.x.x range. If this is the case, traffic will be picked up by “ns param” and we may be hitting a wrong traffic flow. Was this listen policy added recently ?