Verifying firewall filter entries using rules associated with an access control list (ACL) template

A non-transitory computer-readable medium storing instructions, the instructions comprising:

• one or more instructions that, when executed by one or more processors, cause the one or more processors to:
• receive a filter entry associated with an access control list (ACL) template,
• the filter entry being associated with processing network traffic,
• the filter entry including:
• one or more match conditions, and
• at least one action associated with the one or more match conditions;
• identify a template type of the ACL template,
• the template type being associated with at least one of:
• a ternary template,
• a longest prefix match (LPM) template, or
• an exact match template;
• determine, based on the template type of the ACL template, one or more rules for verifying the filter entry in association with the ACL template,
• the one or more rules including:
• a first set of rules, and
• a second set of rules, and
• a third set of rules,
• the ternary template being associated with the first set of rules,
• the LPM template being associated with the first set of rules and the second set of rules, and
• the exact match template being associated with the first set of rules, the second set of rules, and the third set of rules;
• verify the filter entry using the one or more rules;
• and
• selectively allocate, based on the template type of the ACL template and a result of verifying the filter entry, a hardware resource of a device for storage of the filter entry.

A method, comprising:

• receiving, by a device, a filter entry that includes a template identifier corresponding to an access control list (ACL) template;
• identifying, by the device, the ACL template using the template identifier,
• the ACL template being associated with:
• one or more match conditions, and
• the template identifier;
• identifying, by the device, one or more sets of rules associated with a type of the ACL template,
• the type of the ACL template being associated with at least one of:
• a ternary template,
• a longest prefix match (LPM) template, or
• an exact match template,
• the one or more sets of rules including:
• a first set of rules,
• a second set of rules, and
• a third set of rules,
• the ternary template being associated with the first set of rules,
• the LPM template being associated with the first set of rules and the second set of rules, and
• the exact match template being associated with the first set of rules, the second set of rules, and the third set of rules;
• verifying, by the device, one or more match conditions of the filter entry using the one or more sets of rules;
• and
• selectively storing, by the device, the filter entry using a memory resource of the device based on a result of verifying the one or more match conditions of the filter entry.