vrfs are filtered by container