Priority resolution for access control list policies in a networking device

A computer program product to generate an action set based on a first ACL and a second ACL stored in a networking element, the computer program product comprising:

• a non-transitory computer-readable medium having computer-readable program code embodied therewith, the computer-readable program code is configured to:
• compare a portion of received network traffic to a first condition in the first ACL and to a second condition in the second ACL, wherein the first and second conditions are associated with respective first and second actions, wherein the first and second ACLs each comprise a plurality of rules, each rule comprising a test condition and at least one action;
• upon determining that the portion satisfies both the first and second conditions and before evaluating respective precedence values assigned to the first and second actions, evaluate the first and second actions to identify a conflict and, upon determining the first action conflicts with the second action, compare the respective precedence values assigned to the first and second actions;
• upon determining that the respective precedence values are equivalent, compare respective priority scores associated with the first ACL and the second ACL, wherein the priority score ranks the first and second ACLs;
• select between the first and second actions as a resolved action based on the respective priority scores;
• instruct the networking element to perform the resolved action;
• compare a different portion of the received network traffic to a third condition in the first ACL and to a fourth condition in the second ACL, wherein the third and fourth conditions are associated with respective third and fourth actions;
• and
• upon determining that the third action does not conflict with the fourth action, select one of the third and fourth actions without evaluating respective precedence values assigned to the third and fourth actions.