Rate limiting for controller based SNAT punts