proxy api: support destination ip/port matching

[stevenctl]

Description

Allow filter chain matches to match on destination IP/port.

This bug fixes ... \ This new feature can be used to ...

API changes

In Matcher added:

• uint32 destination_port
• CidrRange[] prefix_ranges

(continuing to duplicate what envoy has)

Code changes

Implement the translation from Proxy to Envoy xDS for the new fields. This was only done in the same places that SourcePrefixRanges were already uses.

Context

Related to #9471

Interesting decisions

We chose to do things this way because ...

Testing steps

I manually verified behavior by relying on it in an experimental fork.

Checklist:

• [X] I have performed a self-review of my own code
• [ ] I have commented my code, particularly in hard-to-understand areas
• [ ] I have made corresponding changes to the documentation
• [ ] I have added tests that prove my fix is effective or that my feature works