flow: add vnet/flow formal API