Or instead of a given time, allow switching back only when the conntrack table is sufficiently empty or somethimg like that.