Method and apparatus for computing priorities between conflicting rules for network services

A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for resolving conflicts between rules for network services, the method comprising:

• receiving a set of network service rules for network data traffic from multiple network services, wherein network service rules from different network services can possibly conflict;
• and
• resolving conflicts between network service rules in the set of network service rules by,
• identifying conflicts between pairs of network service rules in the set of network service rules,
• determining a priority relationship between each pair of conflicting network service rules, and
• assigning priorities to network service rules in the set of network service rules in a manner consistent with the determined priority relationships, thereby allowing conflicts between network service rules to be subsequently resolved based on the assigned priorities.

An apparatus that resolves conflicts between rules for network services, comprising:

• an input configured to receive a set of network service rules for network data traffic from multiple network services, wherein network service rules from different network services can possibly conflict;
• and
• a resolving mechanism that resolves conflicts between network service rules in the set of network service rules, wherein the resolving mechanism is configured to,
• identify conflicts between pairs of network service rules in the set of network service rules,
• determine a priority relationship between each pair of conflicting network service rules, and to
• assign priorities to network service rules in the set of network service rules in a manner consistent with the determined priority relationships, thereby allowing conflicts between network service rules to be subsequently resolved based on the assigned priorities.