diff --git a/patches/systemvm/debian/config/opt/cloud/bin/vpc_staticroute.sh b/patches/systemvm/debian/config/opt/cloud/bin/vpc_staticroute.sh
new file mode 100755
index 00000000000..542c0c6acd7
--- /dev/null
+++ b/patches/systemvm/debian/config/opt/cloud/bin/vpc_staticroute.sh
@@ -0,0 +1,130 @@
+#!/usr/bin/env bash
+# Copyright 2012 Citrix Systems, Inc. Licensed under the
+# Apache License, Version 2.0 (the "License"); you may not use this
+# file except in compliance with the License.  Citrix Systems, Inc.
+# reserves all rights not expressly granted by the License.
+# You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# 
+# Automatically generated by addcopyright.py at 04/03/2012
+# @VERSION@
+
+source /root/func.sh
+source /opt/cloud/bin/vpc_func.sh
+lock="biglock"
+locked=$(getLockFile $lock)
+if [ "$locked" != "1" ]
+then
+    exit 1
+fi
+
+usage() {
+  printf "Usage: %s:  -a < routes > \n" $(basename $0) >&2
+}
+
+#set -x
+
+flush_table_backup() {
+  flush_table "static_route_back"
+}
+
+flush_table() {
+  local tab=$1
+  sudo ip route flush table $tab
+}
+
+copy_table() {
+  local from=$1
+  local to=$2
+  sudo ip route show table $from | while read route
+  do
+    sudo ip route add table $to $route
+  done
+}
+
+backup_table() {
+  flush_table "static_route_back"
+  copy_table "static_route" "static_route_back"
+  flush_table "static_route"
+}
+
+restore_table() {
+  flush_table "static_route"
+  copy_table "static_route_back" "static_route"
+  flush_table "static_route_back"
+}
+
+static_route() {
+  local rule=$1
+  if [ "$rule" == "none" ]
+  then
+    return 0
+  fi
+  local ip=$(echo $rule | cut -d: -f1)
+  local gateway=$(echo $rule | cut -d: -f2)
+  local cidr=$(echo $rule | cut -d: -f3)
+  logger -t cloud "$(basename $0): static route: public ip=$ip \
+  	gateway=$gateway cidr=$cidr"
+  local dev=$(getEthByIp $ip)
+  if [ $? -gt 0 ]
+  then
+    return 1
+  fi
+  sudo ip route add $cidr dev $dev via $gateway table static_route &>/dev/null
+  result=$?
+  logger -t cloud "$(basename $0): done static route: public ip=$ip \
+  	gateway=$gateway cidr=$cidr"
+  return $result
+}
+
+gflag=
+aflag=
+while getopts 'a:' OPTION
+
+do
+  case $OPTION in
+  a)    aflag=1
+        rules="$OPTARG"
+        ;;
+  ?)    usage
+        unlock_exit 2 $lock $locked
+        ;;
+  esac
+done
+
+if [ -n "$rules" ]
+then
+  rules_list=$(echo $rules | cut -d, -f1- --output-delimiter=" ")
+fi
+
+success=0
+
+backup_table
+
+for r in $rules_list
+do
+  static_route $r
+  success=$?
+  if [ $success -gt 0 ]
+  then
+    logger -t cloud "$(basename $0): failure to apply fw rules for guest network: $gcidr"
+    break
+  else
+    logger -t cloud "$(basename $0): successful in applying fw rules for guest network: $gcidr"
+  fi
+done
+
+if [ $success -gt 0 ]
+then
+  logger -t cloud "$(basename $0): restoring from backup for guest network: $gcidr"
+  restore_table
+else
+  logger -t cloud "$(basename $0): deleting backup for guest network: $gcidr"
+  flush_table_backup
+fi
+unlock_exit $success $lock $locked
+