Abstract: The present application discloses a method, system, and computer system for managing traffic in a Software-Defined Wide Area Network (SD-WAN) comprising a hub and multiple spoke, each spoke having one or more Virtual Routers (VRs). The method includes: (a) receiving, at the hub, encapsulated traffic from a spoke over a tunnel, wherein the encapsulated traffic includes a global virtual router identifier (VR_ID) corresponding to a VR on the spoke, (b) determining, based on the global VR_ID, a zone associated with the VR, and (c) forwarding return traffic to the spoke by encapsulating the return traffic with the global VR_ID corresponding to the VR on the spoke.

Abstract: The present application discloses a method, system, and computer system for routing network traffic to be sent through a firewall, the network traffic being routed to the appropriate client when the firewall services clients having overlapping IP addresses. The method includes: (a) storing an ingress Virtual Routing and Forwarding (VRF) information in connection with a client-server flow information for a particular session, and (b) causing network traffic received from a server to be routed based at least in part on the VRF information.