You are designing a Control-based SDN overlay network. IP filtering and tenant separation for Layer 3 and Layer 4 traffic is required for this installation.

In this scenario, which Contrail component performs this function?

A. vSwitch
B. control node

C. vRouter

D. compute node