One list is from ingress nodes (used for protocol classification) and the second one is from exit nodes (used for flow risk check)