T5368: service ids ddos-protection add support sflow mode

sFlow mode requires fewer resources then mode "mirror"
Integrate it into configuration mode

set service ids ddos-protection mode 'sflow'
set service ids ddos-protection sflow listen-address '127.0.0.1'
set service ids ddos-protection sflow port '6343'