Filters


sequential evaluation and last match with a lot of rules: performance problem

smaller filter blocks would be better
selectively applied to neighbors

desire to make it pf-like went too far

filter performance cost us some deployments at IXes