A method comprising: receiving, by a network interface card of a computing device via a physical network interface of the network interface card, a packet inbound from the physical network interface, wherein the network interface card comprises a first hardware component and a second hardware component, and wherein the first hardware component and the second hardware component provide separate packet input/output access to a physical network interface of the network interface card; wherein the packet comprises an inner packet and a tunnel encapsulation header indicating a virtual network of a plurality of virtual networks, the virtual network including a virtual network endpoint; receiving, by a virtual router of the computing device, the packet from the network interface card and determining, by the virtual router based at least on the tunnel encapsulation header, a network forwarding table that indicates a layer 2 address, configured for the second hardware component, is a layer 2 address of the virtual network endpoint; outputting, by the virtual router in response to determining the destination endpoint of the packet is the virtual network endpoint of the computing device, using the first hardware component, the packet back to the network interface card with a layer 2 header having a destination layer 2 address that is the layer 2 address of the virtual network endpoint; and switching, by the network interface card in response to receiving the packet from the virtual router, the packet to the virtual network endpoint and outputting, using the second hardware component, the packet to the virtual network endpoint. receiving, by a network interface card of a computing device via a physical network interface of the network interface card, a packet inbound from the physical network interface, wherein the network interface card comprises a first hardware component and a second hardware component, and wherein the first hardware component and the second hardware component provide separate packet input/output access to a physical network interface of the network interface card; wherein the packet comprises an inner packet and a tunnel encapsulation header indicating a virtual network of a plurality of virtual networks, the virtual network including a virtual network endpoint; receiving, by a virtual router of the computing device, the packet from the network interface card and determining, by the virtual router based at least on the tunnel encapsulation header, a network forwarding table that indicates a layer 2 address, configured for the second hardware component, is a layer 2 address of the virtual network endpoint; outputting, by the virtual router in response to determining the destination endpoint of the packet is the virtual network endpoint of the computing device, using the first hardware component, the packet back to the network interface card with a layer 2 header having a destination layer 2 address that is the layer 2 address of the virtual network endpoint; and switching, by the network interface card in response to receiving the packet from the virtual router, the packet to the virtual network endpoint and outputting, using the second hardware component, the packet to the virtual network endpoint.