Modify the API to have an inside and outside interface tag.

This lets us (eventually) ensure we're matching packets in the correct
direction.