| 摘要 |
A system is configured to receive a set of rules that specify how packets are to be processed by a node, where the set of rules include one or more negative rules that identify operations to be performed, by the node, when information associated with the packets does not match information specified by the negative rules, and one or more positive rules that identify other operations to be performed, by the node, when the information associated with the packets matches information specified by the positive rules. The system is also configured to create a group of modified rules by converting the negative rules into a corresponding group of positive rules; and install the modified rules in the node that allows the node to process the packets, using the modified rules, as though the node was processing the packets using the set of rules.
|
