Technologies for access control

One or more machine-readable storage media comprising a plurality of instructions stored thereon that, in response to execution by a computing device, cause the computing device to:

• parse a network packet received by the computing device to identify an n-tuple of a header of the network packet, wherein the n-tuple is associated with one or more access control rules;
• determine a bitmask associated with an access control rule of a virtual machine of the computing device from the one or more access control rules, wherein the bitmask comprises a bit-level bitmask of a transition byte of at least one of a source internet protocol address field or the destination internet protocol address field of the header of the network packet and the transition byte is associated with a subnet of the corresponding internet protocol address;
• apply the determined bitmask to the n-tuple of the network packet to generate a masked n-tuple;
• generate a hash of the masked n-tuple;
• compare the generated hash to a reference hash associated with the access control rule to identify a match;
• and
• perform an access control action in response to identifying a match between the generated hash and the reference hash.

A method for performing access control by a computing device, the method comprising:

• parsing, by the computing device, a network packet received by the computing device to identify an n-tuple of a header of the network packet, wherein the n-tuple is associated with one or more access control rules;
• determining, by the computing device, a bitmask associated with an access control rule of a virtual machine of the computing device from the one or more access control rules, wherein the bitmask comprises a bit-level bitmask of a transition byte of at least one of a source internet protocol address field or the destination internet protocol address field of the header of the network packet and the transition byte is associated with a subnet of the corresponding internet protocol address;
• applying, by the computing device, the determined bitmask to the n-tuple of the network packet to generate a masked n-tuple;
• generating, by the computing device, a hash of the masked n-tuple;
• comparing, by the computing device, the generated hash to a reference hash associated with the access control rule to identify a match;
• and
• performing, by the computing device, an access control action in response to identifying a match between the generated hash and the reference hash.