On the ACL preceding or integrated with the sfc flow - I think ACL has to be applied first then the classifier channels the packets to the respective network that has VNFs. The scope of sfc flow programming is generally orthogonal to how the network is setup and where classifier is placed, which are typically done during the system setup. Typically the classifier adds the service chain id, which probably better off past the acl..
internet /\ __________|____ <ACL>----| classifier |(GW) |-------> vnfs ~~~~~~~~~~~~~
_______________________________________________ discuss mailing list discuss@openvswitch.org http://openvswitch.org/mailman/listinfo/discuss