service: add vxlan tunnel support