What forms do the tenant security service instances of CloudOS 7.0 take?

All tenant security service instances of CloudOS 7.0 are hosted on virtual machines. These virtual machines can run on any CVK server. Among them, virtual firewalls are mandatorily deployed in active-standby mode (i.e., using two virtual machines), while web firewalls can be manually configured for either single-machine deployment or active-standby mode deployment.