net/sfc/base: add API to control UDP tunnel ports