Technologies for efficient network flow classification with vector bloom filters

A method for network packet routing, the method comprising:

• receiving, by a computing device, a network packet that includes a header;
• generating, by the computing device, a vector Bloom filter key as a function of the header of the network packet;
• searching, by the computing device, a plurality of vector Bloom filters for a first vector Bloom filter that matches the vector Bloom filter key comprises (i) masking the header of the network packet with the mask associated with the flow sub-table to generate a masked header and (ii) searching the flow sub-table for a flow rule that matches the masked header, wherein each vector Bloom filter is associated with a flow sub-table, wherein each flow sub-table comprises one or more flow rules, and wherein each flow sub-table is associated with a mask;
• searching, by the computing device, a flow sub-table that is associated with the first vector Bloom filter for a first flow rule that matches the header of the network packet in response to searching the plurality of vector Bloom filters for the first vector Bloom filter;
• and
• applying, by the computing device, a flow action of the first flow rule in response to searching the flow sub-table.

One or more non-transitory, computer-readable storage media comprising a plurality of instructions that in response to being executed cause a computing device to:

• receive a network packet that includes a header;
• generate a vector Bloom filter key as a function of the header of the network packet;
• search a plurality of vector Bloom filters for a first vector Bloom filter that matches the vector Bloom filter key comprises to:
• (i) mask the header of the network packet with the mask associated with the flow sub-table to generate a masked header and (ii) search the flow sub-table for a flow rule that matches the masked header, wherein each vector Bloom filter is associated with a flow sub-table, wherein each flow sub-table comprises one or more flow rules, and wherein each flow sub-table is associated with a mask;
• search a flow sub-table that is associated with the first vector Bloom filter for a first flow rule that matches the header of the network packet in response to searching the plurality of vector Bloom filters for the first vector Bloom filter;
• and
• apply a flow action of the first flow rule in response to searching the flow sub-table.