I had the same issue until I checked if activecalls was consuming unexpected bandwidth during idle times. Once I filtered out that traffic and made sure it wasn't keeping connections open, the spikes settled down. Also make sure flow states are clearing properly when calls drop — I found stale states caused odd behavior in connection tracking. Double-checking that helped clean things up a lot on my setup.
"