For the packets from the client side, the flow matching is performed preferentially according to the VLAN tag carried in the packets. If the matching fails and the TLS service flow is deployed on the device, the packets are matched to the TLS service flow.