(All we need to do while holding the global lock is allocated IFBs; the
generation of routing scripts and traffic shaping scripts is both
unlikely to fail and potentially slow due to running djikstra.  So, also
let the vnode early release prior to those things, immediately after IFB
allocation.)