More OPSVM changes; now boss can be a XEN VM. The wrinkle here is that
if we need to assign a routable IP to boss, we also need a routable IP for the OPS VM, and the easiest way to do that is with an address pool (count=1). Also changes to pass that IP address to the XEN clientside code so that it alters the antispoofing firewall rules that every XEN VM gets.
Showing with 224 additions and 12 deletions