You can set up service insertion to redirect north-south traffic at a tier-0 router or east-west traffic at a tier-1 router to a VM. A service running in the VM can process the traffic and take appropriate actions.

The following architectural diagram shows the flow of data with service insertion configured.

service insertion topology

Service insertion supports high availability (HA) in active-standby mode with two edge nodes and two service VMs. It does not support HA in active-active mode. A router can support only one service.

Setting up service insertion involves the following steps:
  • Register a service.
  • Deploy a service instance.
  • Configure traffic redirection.