CHROMIUM: Delay SFE TCP fast forward before bi-directional QoS resolved

Don't fast forward any TCP packets until QoS is resolved for both
flow directions.  This ensures that all TCP window tracking is
performed by either SFE or Conntrack.  Otherwise allowing one
flow direction to be SFE forwarded and the other Conntrack forwarded
can lead to out-of-sync TCP window tracking state across the two
layers.

BUG=b:141434791
TEST=Ran iperf packet between two client devices utilizing port
     forwarding policy.  This previously consistently triggered
     "out of window" connection reset before the change.  Verified
     10+ iterations of iperf successfully established connection.

Change-Id: I397cb67f2a0d1cf8fa6a945b03bf98ad7ca0fcca
Signed-off-by: Danny J. Mitzel <mitzel@google.com>
Reviewed-on: https://chromium-review.googlesource.com/1827656
Tested-by: Danny Mitzel <mitzel@google.com>
Commit-Ready: Danny Mitzel <mitzel@google.com>
Legacy-Commit-Queue: Commit Bot <commit-bot@chromium.org>
Reviewed-by: Kan Yan <kyan@chromium.org>
(cherry picked from commit 6be90201e1c4e8fad12853b7cb9451b45332fa0f)
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/third_party/kernel/+/1832658
Reviewed-by: Danny Mitzel <mitzel@chromium.org>
1 file changed