conntrackd filling up var

##### ISSUE TYPE
* Bug Report

##### COMPONENT NAME
~~~
VR
~~~

##### CLOUDSTACK VERSION
~~~
latest
~~~

##### CONFIGURATION
~~~
N/A
~~~

##### OS / ENVIRONMENT
~~~
KVM
~~~

##### SUMMARY
~~~
We have large customers with a lot of VR traffic traversing the VRs. Logrotate cannot keep up and /var fills up to 100%, causing the VR to exhibit problems when attempting to start/restart instances in the VPC and/or traffic stops flowing. Conntrackd is logging verbosely to daemon.log.
~~~

##### STEPS TO REPRODUCE
~~~

1. Construct a VPC with a redundant VR pair with a private gateway or tunnel
2. Create a large amount of traffic to/from a VPC over gateway or tunnel

~~~

##### EXPECTED RESULTS
~~~
/var should not fill up regardless of traffic load
~~~

##### ACTUAL RESULTS
~~~
/var fills up
~~~

Reproduce the issue with a redundant VR pair, a private gateway or tunnel, and high traffic, then inspect conntrackd logging in daemon.log alongside logrotate behavior. Done means the VR's /var does not reach capacity under the reported traffic load and instance operations and traffic continue normally.

Written by the indexing model from the issue text.