kernel: add support for enabling hardware flow offload via iptables