R80.40 southbound Geo Cluster hide nat in AWS environment

[dinkoctlui]

Hello

We've deployed a R80.40 southbound Geo Cluster in AWS environment for dealing with east-west and egress Internet traffics.

We don't want to hide nat AWS east-west traffics but only hide nat Internet egress traffics.

My nat policy is in attachment

Every thing works well until I test failover 😞

After the geo cluster failover, egress Internet traffics always match nat rule#4, so making no access to Internet ...

Some one can help ...