redirection semantics
 
 
If you ask the switch to allow a client through, do existing flows break?
- Do we add a “redirect client except for the following ethereal ports” command?
 - Do we assume that all switches keep per-flow state, and can redirect new connections without breaking old ones?
 - Ostrich Algorithm: let the connections break?
 
Multiple services -- only some redirected?