persist iptables rules / routes for addressable containers across host reboots

[Dimiter Naydenov]

If an instance hosting addressable containers is rebooted, the iptables rules and static routes on the instance allowing access to the hosted containers are not created so the containers are not accessible. We need to make sure those rules and routes are created on every boot. One option is to modify the host's /etc/network/interfaces to have pre-up and post-down scripts that add the rules and routes, like we do for the containers' /etc/network/interfaces.

[Dimiter Naydenov (dimitern)]

I'm not targeting this towards 1.23-beta4 as I don't want to block the release, but there's no 1.23-beta5 milestone yet.

[Dimiter Naydenov (dimitern)]

We need to get this fixed for 1.23.1, as it will affect customers.

[Dimiter Naydenov (dimitern)]

It's fine I guess to re-target this for 1.23.2 if the fix for bug 1445063 need to go out immediately.