Add service proxy

This adds a service proxy based on nfproxy and changes to the service IP allocation to make it work.
Also adds support for masquerading outbound traffic for outbound network connectivity.

Test Plan:
Currently manually tested by creating an alpine pod and running 'apk add curl && curl -k https://192.168.188.1:443/'.
Will be covered later by CTS.

Bug: T810

X-Origin-Diff: phab/D580
GitOrigin-RevId: cace863fd8c2f045560f8abf84c40cc77bc275d4
diff --git a/nogo_config.json b/nogo_config.json
index f3f47ff..19e74f5 100644
--- a/nogo_config.json
+++ b/nogo_config.json
@@ -76,7 +76,8 @@
     "exclude_files": {
       "external/io_k8s_kubernetes/": "third_party",
       "external/runc/vendor/github.com/vishvananda/netlink": "third_party",
-      "external/com_github_google_gvisor/": "third_party"
+      "external/com_github_google_gvisor/": "third_party",
+      "external/com_github_sbezverk_nfproxy/": "third_party"
     }
   },
   "structtag": {