Which of the following statements is false about VM service traffic in the computing scenario?

In Huawei’s CloudFabric computing scenario, VM service traffic involves virtualized environments with VXLAN overlays and traditional VLANs. Let’s evaluate each statement:

A. Traffic inside a fabric is VXLAN encapsulated:This is true. Within a CloudFabric network, VXLAN encapsulation is used to transport traffic across the fabric, enabling overlay networking for VMs.TRUE.

B. Inter-VPC traffic must pass through the firewall:This is false. Inter-VPC (Virtual Private Cloud) traffic can be routed directly between VPCs using a gateway or router (e.g., with EVPN Type 5 routes) without necessarily passing through a firewall, depending on security policies. Firewalls are optional for inter-VPC traffic, not mandatory.FALSE.

C. Traffic between VAS devices and service leaf nodes is VLAN encapsulated:This is true. Value-Added Services (VAS) devices (e.g., load balancers) often connect to service leaf nodes using VLAN encapsulation, especially in traditional or hybrid deployments.TRUE.

D. Traffic between vSwitches on virtual servers and server leaf nodes is VLAN encapsulated:This is true. Traffic from virtual switches (vSwitches) on hypervisors to physical server leaf nodes typically uses VLAN encapsulation over the physical NICs, before VXLAN overlay if applicable.TRUE.

Thus,Bis the false statement because inter-VPC traffic does not always require a firewall.References:Huawei CloudFabric Data Center Network Solution – Traffic Engineering; HCIP-Data Center Network Training – VM Traffic.