perf: optimize firewall

[jerome-jutteau]

Firewalling may be optimized as the Butterfly specific graph is to only have one host behind a stateful firewall instance. This ticket is a reminder to work on this issue (which is heavily related to packetgraph). Maybe we can have a specific firewall optimization of butterfly's special case