Update calico.md to metion the ChecksumOffloadBroken=true

[yankay]

What type of PR is this?

/kind documentation

What this PR does / why we need it:

When installed in the Rocky9, there are some bugs with calico and kernel. The network is broken. The kubespray's default configuration needs to provision a healthy cluster.

So the kubespray needs to metion it the calico.md . Thanks to the @oomichi @floryut @cristicalin 's advise at the #9261

Which issue(s) this PR fixes:

Fixes #8992

Special notes for your reviewer:

Does this PR introduce a user-facing change?:

⚠️ WARN USER ABOUT THAT

[floryut]

@yankay Thank you, agree with this version 👍
/ok-to-test

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: floryut, yankay

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [floryut]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[oomichi]

Thanks for providing a good advice for users.

/lgtm

[andy108369]

(Thinking of whether TCP offload should be disabled by default) I am wondering how will the users find out they need to disable the TCP offload?
I discovered this issue by chance while have been debugging something else (1 second delays for SVC -> POD communication, calico configured with VXLAN.)

[floryut]

(Thinking of whether TCP offload should be disabled by default) I am wondering how will the users find out they need to disable the TCP offload? I discovered this issue by chance while have been debugging something else (1 second delays for SVC -> POD communication, calico configured with VXLAN.)

Noted, we'll add a warning in the next release note about this one.

[andy108369]

Another point I thought to leave here, the communication between the nodes does not work at all in Linux 6.0 without this workaround (for disabling the TCP offloading).
The network packets would just hang forever, whereas with Linux 5.15 they would only delay for 1 second but go through.

[yankay]

The Calico Disable VXLAN checksum offload by default at : v3.24.5, v3.25.x

projectcalico/calico#6842