Multi-tenancy:

All outbound packets would first be inspected to make sure
src_mac and dst_mac belongs to the same tenant.