ipvs: add sysctl to ignore tunneled packets