How policy can be enforced? GBP is white-list model so we should deny all traffic implicitly on VPP and allow traffic explicitly. What we want to use for policy classification? N-tuple classifier? https://wiki.fd.io/view/VPP/Introduction_To_N-tuple_Classifiers

• Is NAT supported on VPP? There should be a command for SNAT in CLI