In the userspace datapath when a native tunnel does not have a resolvable hardware address, ofproto-xlate will send an arp/nd packet for each packet that might transit it.

This has no rate limit so potentially could spam a network with arp/nd packets, and could also slow down OVS's translation of flows.

There should be a coverage counter to record how many packets flow translation generates, and packet generation should be rate limited.