Geometric based flow programming

The method of claim 1, further comprising:

• receiving a second packet at the first NVD for delivery to a second VNIC;
• determining with the first NVD that the first NVD does not have a rule for processing the second packet;
• and
• forwarding the second packet to at least one server, wherein the at least one server is configured to process the second packet. (Original) The method of claim 9, wherein the at least one server comprises configuration information for a set of VNICs in at least one virtual network.

A system comprising:

• at least one server comprising a plurality of compiled rules, the at least one server configured to:
• generate a first compiled rule, wherein generating the first compiled rule comprises:
• identifying a potential rule for each of a first plurality of stages, wherein each of the potential rules is relevant to a first plurality of packet flows;
• and
• forming the first compiled rule from an intersection between the potential rules across each of the first plurality of stages;
• and
• a first Network Virtualization Device (“NVD”), wherein the NVD is configured to:
• receive the first compiled rule, wherein each of the at least one the first compiled rule is applicable to one or more a class of packets received by the first NVD for delivery to one or more Virtualized Network Interface Cards (“VNICs”);
• receive a first packet for delivery to a first VNIC;
• determine that the first compiled rule is applicable to the first packet;
• and
• process the first packet according to the first compiled rule.

A non-transitory computer-readable storage medium storing a plurality of instructions executable by one or more processors, the plurality of instructions when executed by the one or more processors cause the one or more processors to:

• generate a first compiled rule, wherein generating the first compiled rule comprises:
• identifying a potential rule for each of a first plurality of stages, wherein each of the potential rules is relevant to a first plurality of packet flows;
• and
• forming the first compiled rule from an intersection between the potential rules across each of the first plurality of stages;
• receive the first compiled rule with one or more processors of a first Network Virtualization Device (“NVD”), wherein the first compiled rule is applicable to one or more packets received by the first NVD for delivery to one or more Virtualized Network Interface Cards (“VNICs”);
• receive a first packet for delivery to a first VNIC;
• determine that the first compiled rule is applicable to the first packet;
• and
• process the first packet according to the first compiled rule.