Research Article
FORTRESS: An Efficient and Distributed Firewall for Stateful Data Plane SDN
| XFSM Table | Match Flags | Actions | State | Event | Actions | Next State |
| Default | SYN = 1 | Forward | Second Handshake |
| Default | SYN 1 | Drop | / |
| Second Handshake | SYN = 1 & ACK = 1 | Forward | Third Handshake |
| Third Handshake | ACK = 1 | Forward | Connected |
| Connected | FIN 1 | Forward | / |
| Connected | FIN = 1 | Forward | Default |
| ⋅ | ⋅ | ⋅ | ⋅ | ⋅ | ⋅ | ⋅ | ⋅ | ⋅ | ⋅ | ⋅ | ⋅ |
| First Handshake | SYN 1 | Drop | / |
| Second Handshake | SYN 1 ACK 1 | Drop | / |
| Third Handshake | ACK 1 | Drop | / |
|
|