Currently active sessions which need connection tracking state are broken by a HA router failover. There is no mechanism to synchronize states between HA router instances. This patch adds conntrackd support to enable state synchronization. An example about using conntrackd with keepalived can be found here: http://backreference.org/2013/04/03/firewall-ha-with-conntrackd-and-keepalived Co-Authored-By: QthCN <tianhuan@unitedstack.com> Change-Id: I28fb57b87c0e7113416873f602fcbce3742b3aaa Closes-Bug: #1365438 Original-Change-Id: Ifc95d5fd17ae8a13958d97796b1046f35bd7aca7