When Connection Tracking is enabled, IPv4 only (IPv6 disabled), and assume there is at least one non-FastTrack’d firewall filter rule enabled, how much RAM does adding a single (srcnat/masqueraded) connection consume?
Are there any other significant resources consumed that scale with connections and NAT?