form relationships!


by definition, for a forwarded connection, the stack side key inbound must be the exact opposite (as in, adresses/ports swapped) of the stack side key outbound (and vice versa)
exceptions with tunnel shitz, but easy to handle

if we can form a relationship between those, and remember the key used on the inbound side, we don't need no state key search on the outbound side!

not as trivial as it sounds, but anyway