A city security design must send suspicious Internet-facing flows i…

Question

A city security design must send suspicious Internet-facing flows into a scrubbing routing instance and then return cleaned traffic to the normal tenant forwarding path. Which pattern best describes this FBF role?

Accepted Answer

Steering matched traffic into a service instance as a data-center security pattern, then forwarding onward after scrubbing. — Treat scrubbing like a car wash on a side street: FBF turns suspect flows into the wash bay instance, then they rejoin the main road clean. Classification-plus-steer is the security pattern—not hoping telemetry alone washes packets.

Answer

Pure VRF route leaking without any packet classification.

Answer

Replacing all tenant VNIs with a single Layer-2 stretch across sites.

Answer

Using only spine telemetry sampling instead of any forwarding change.

A city security design must send suspicious Internet-facing flows into a scrubbing routing instance and then return cleaned traffic to the normal tenant forwarding path. Which pattern best describes this FBF role?

Short Explanation

Full Explanation