forward copies data between local and remote, and tracks the connection. local, wired to TUN via netstack, is either gonet.TCPConn or gonet.UDPConn. remote, wired to egress, is wrapped in rwext; but the underlying conn may be *net.TCPConn, *net.UDPConn, *demuxconn, or dialers.retrier|splitter etc. I
(local, remote net.Conn, smm *FlowSummary)
source not stored for this graph (policy: none)
nothing calls this directly
no test coverage detected