Support fw rules and expiration for instances

Change-Id: I1e620aa6042f98edaab24c4778c63fcdb216a51b