Symmetric bi-directional policy based redirect of traffic flows

A first switch connected to a first endpoint comprising:

• one or more computer processors;
• and
• a memory storing instructions that, when executed by the one or more computer processors, cause the first switch to:
• receive a first data packet transmitted by the first endpoint to a second endpoint connected to a second switch;
• enforce an ingress data policy to the first data packet by applying a hashing algorithm to a Source Internet Protocol (SIP) value and a Destination Internet Protocol (DIP) value of the first data packet, resulting in a hash value of the first data packet;
• and
• route the first data packet to a first service node based on the hash value of the first data packet.

A non-transitory computer-readable medium storing instructions that, when executed by a first switch connected to a first endpoint, cause the first switch to:

• receive a first data packet transmitted by the first endpoint to a second endpoint connected to a second switch;
• enforce an ingress data policy to the first data packet by applying a hashing algorithm to a Source Internet Protocol (SIP) value and a Destination Internet Protocol (DIP) value of the first data packet, resulting in a hash value of the first data packet;
• and
• route the first data packet to a first service node based on the hash value of the first data packet.