Great post.
In some scenarios veth is being replaced with netkit for a similar reason. Does this impact how you're going to manage this?