Research Article

FORTRESS: An Efficient and Distributed Firewall for Stateful Data Plane SDN

Table 5

XFSM table.

XFSM Table
Match Flags Actions
State Event Actions Next State

Default SYN = 1 Forward Second Handshake

Default SYN 1 Drop /

Second Handshake SYN = 1 & ACK = 1 Forward Third Handshake

Third Handshake ACK = 1 Forward Connected

Connected FIN 1 Forward /

Connected FIN = 1 Forward Default


First Handshake SYN 1 Drop /

Second Handshake SYN 1 ACK 1 Drop /

Third Handshake ACK 1 Drop /