As we discussed here we need to update the network.disable.rpfilter and consoleproxy.disable.rpfilter config values to false in the upgrade path (either Upgrade class / schema file) when the value is not 'true'.
Check the following pull request for more information: #6380