Some experiments. ubi <-> zoo. The problem seems to be ping packets in the direction ubi->zoo. If I set my ping interval higher, I still get disconnects. Sniffing it seems that the OpenVPN ping is one-directional. So it is my guess that the ubi->zoo keeps some stateful firewall open, something with a very low timeout.