Explanation/Reference:
TCP/UDP port 53 is the DNS (Domain Name Service), which is used for domain name resolution.
Service Insertion
The application uses OpenFlow to redirect DNS traffic from the switch to the application and compares it against RepDV to make forwarding or blocking decisions. However, packets of new flows need to be copied to switch CPU for processing and then redirected to the application, limiting performance in the range of tens of megabits per second. To maximize the performance and keep the switch to what it does best, packets switching, the switch hardware is used to pipe traffic directly to application, yielding potential performance in the gigabits per second range or line rate. In other words, packets are forwarded by switch hardware instead by switch CPU through a Service Insertion tunnel. The desired best performance for application is achieved with switches that support OpenFlow and tunnel technology for Service Insertion.
Figure: Service insertion mechanism

References: HP Network Protector SDN Application - Introduction of the HP Network Protector Solution
http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04626978#N100B0