We should use a mechanism similar to the inbound hash-based packet throttler in the ethernet/arp code to limit the outbound generation of ARP queries and ICMP packets.

In this case, ICMP would cover both v4 and v6 cases, and especially ttl-expired and neighbor-discovery queries.