ipsec: introduce fast path ipv6 inbound matching