fix: Opt out TCP sockmap bypass by default

[jschwinger233]

Once the kernel issue1 is fixed and backported to TLS, I'll open another pull request as a follow-up to automatically enable this option if kernel has the patches.

Background

A kernel issue (confirmed by community) breaks TCP clients (e.g. glider) who use splice syscall when enabling bpf sockmap redirect. This PR opts out that performance optimization until kernel bug is fixed.

Checklist

• [ ] The Pull Request has been fully tested
• [ ] There's an entry in the CHANGELOGS
• [ ] There is a user-facing docs PR against https://github.com/daeuniverse/dae

Full Changelogs

• [Implement ...]

Issue Reference

Closes #[issue number]

Test Result

[sumire88]

Thanks for raising this. Is there any correlation between #505 and this PR?

[jschwinger233]

Thanks for raising this. Is there any correlation between #505 and this PR?

Most likely not. This feature only affects local TCP, shouldn't have something to do with WAN UDP.