Description of problem:
I'm trying to make a brouter on my raspberry pi at home. Here is the "very" simplified architecture: 

            +-------+
            |       |
            |  br0  |------+              +--------------------+
    +-------|       |      |              | systemd-nspawn     |
    |       +-------+      |              |  openvpn           |
    |                      |              |                    |
    |                      |              |                    |
+---+----+           +-----+----------+   +--------+           |
|  eth0  |           | vb-vpngateway  +---+  host0 |           |
+--------+           +----------------+   +--------+           |
192.168.1.10           172.17.94.1/28     | 172.17.94.2/28     |
                                          |                    |
                                          +--------------------+

In order for ports belonging to the bridge to communicate between each other I need to put in place a bunch of ebtables rules...

I'm running Fedora Server edition. ebtables is installed and all modules are loaded correctly: 

[lionel@raspberry ~]$ lsmod |grep ebt
ebt_arp                16384  2
ebt_ip                 16384  2
ebtable_broute         16384  1
ebtable_nat            16384  1
ebtable_filter         16384  1
ebtables               24576  3 ebtable_filter,ebtable_nat,ebtable_broute
bridge                122880  1 ebtable_broute

And everything works fine when evoking ebtables command directly..

Version-Release number of selected component (if applicable):
Name        : firewalld
Version     : 0.4.4.4
Release     : 1.fc25
Architecture: noarch

Name        : ebtables
Version     : 2.0.10
Release     : 21.fc25
Architecture: armv7hl

How reproducible:
100%

Steps to Reproduce:
1. sudo firewallctl direct -p add rule eb broute BROUTING 1 '-p IPv4 -i eth0 --ip-dst 192.168.1.10 -j DROP'
2. sudo firewallctl reload

Actual results:
ebtables rule not installed in BROUTING on the broute table.
And in the log of firewalld I have:
raspberry firewalld[15769]: WARNING: '/usr/sbin/ebtables -t broute -I BROUTING_direct 1 -p IPv4 -i eth0 --ip-dst 192.168.1.10 -j DROP' failed:

Expected results:
ebtables rule is installed in BROUTING on the broute table.

Additional info:

If I installed the rules directly via the ebtables command, everything is working smoothly without any trouble. But once I reload the firewall, the ebtables rules I put in place manually are erased. Hope this will ring a bell to someone..