diff --git a/roles/frr/templates/frr.conf.j2 b/roles/frr/templates/frr.conf.j2
index 08ae039..f42df43 100644
--- a/roles/frr/templates/frr.conf.j2
+++ b/roles/frr/templates/frr.conf.j2
@@ -2,6 +2,10 @@ frr defaults datacenter
 service integrated-vtysh-config
 log syslog
 
+# Without this frr and kernel ECMP routes sometimes get desynced when a link is
+# lost and found. Maybe related to https://github.com/FRRouting/frr/issues/12239.
+zebra nexthop-group keep 1
+
 # we only have the default route, so allow talking to BGP peers over it
 ip nht resolve-via-default