Meta Platforms, Inc.
Systems and methods for high-efficiency network-packet filtering

Abstract:

The disclosed computer-implemented method may include (i) configuring a packet filtering policy at least in part by defining an attribute map and a set of network-packet filtering rules that use logical groupings of distinguishing attributes as input parameters, (ii) after configuring the packet filtering policy, receiving an incoming network packet, (iii) extracting distinguishing attributes from the incoming network packet, (iv) translating, based on the attribute map, the distinguishing features extracted from the incoming network packet into logical groupings associated with the network packet, and (v) applying the packet filtering policy to the incoming network packet by using the logical groupings associated with the network packet as input parameters to the filtering rules. Various other methods, systems, and computer-readable media are also disclosed.