support for network service header (NSH)
First part would be a dedicated protocol parser for NSH.
Second part would be to have some sort of integration within the engine based on the metainformation we receive from the NSH. One example might be deciding which tenant to use.
Another option for inline mode would be to add a flag to the packet that has been analyzed so another hop can investigate it.