When a VM is migrating, it is currently non transparent for the user as all it's old firewall sessions are not preserved in the newly created virtual nic (check with Sidney).

We may be able to preserve sessions by:

1. dumping sessions from firewall brick (binary blob ?). maybe we need to a new protobuf call for that ?
2. injecting sessions at nic creation time