Egress filtering

[jbrendel]

It should be possible to perform filtering of egress traffic. Examples:

Deny:

• Traffic to a certain set of CIDRs
• Traffic to a certain set of tenants
• Traffic to a certain set of segments within the current tenant
• Combination of the above

Only allow:

• Traffic to a certain set of CIDRs
• Traffic to a certain set of tenants
• Traffic to a certain set of segments within the current tenant
• Combination of the above

Combination of the two sections, which raises questions of ordering.

For starters (minimum feature): Deny traffic