In reply to Anirudh Mathuria.

Anirudh, the isolation and Stateless Contracts are applied at line rate in hardware in ACI. This happens while packet is being switched, so you get highest performance first level filtering.