The Tuple

Destination Service

The destination address and destination port are the service side of the tuple.

highlighted = computed this step

The destination names the service side

The destination address is 203.0.113.5. The destination port is 443.

dst port=443\text{dst port}=443
Destination serviceThe firewall tuple is decoded from exact pinned bytes.Tuple fields104 bits / 13 bytes0xc0a8010acb007105069c4001bbbyte 0byte 1byte 2byte 311000000101010000000000100001010byte 4byte 5byte 6byte 711001011000000000111000100000101byte 8byte 9byte 10byte 1100000110100111000100000000000001byte 1210111011source-ip192.168.1.10destination-ip203.0.113.5protocol6source-port40000destination-port443(cont.)

The service port matters

The first rule checks a different destination port, so this pinned port will matter when rows are tested.

tuple port=443\text{tuple port}=443
Destination serviceThe firewall tuple is decoded from exact pinned bytes.Tuple fields104 bits / 13 bytes0xc0a8010acb007105069c4001bbbyte 0byte 1byte 2byte 311000000101010000000000100001010byte 4byte 5byte 6byte 711001011000000000111000100000101byte 8byte 9byte 10byte 1100000110100111000100000000000001byte 1210111011source-ip192.168.1.10destination-ip203.0.113.5protocol6source-port40000destination-port443(cont.)

No name lookup is involved

The firewall sees bytes and integers here, not a web name or a DNS answer.

destination address=203.0.113.5\text{destination address}=203.0.113.5
Destination serviceThe firewall tuple is decoded from exact pinned bytes.Tuple fields104 bits / 13 bytes0xc0a8010acb007105069c4001bbbyte 0byte 1byte 2byte 311000000101010000000000100001010byte 4byte 5byte 6byte 711001011000000000111000100000101byte 8byte 9byte 10byte 1100000110100111000100000000000001byte 1210111011source-ip192.168.1.10destination-ip203.0.113.5protocol6source-port40000destination-port443(cont.)

Summary

The tuple is now ready for ordered policy rows: source, destination, protocol, and destination port.

protocol=6\text{protocol}=6
Destination serviceThe firewall tuple is decoded from exact pinned bytes.Tuple fields104 bits / 13 bytes0xc0a8010acb007105069c4001bbbyte 0byte 1byte 2byte 311000000101010000000000100001010byte 4byte 5byte 6byte 711001011000000000111000100000101byte 8byte 9byte 10byte 1100000110100111000100000000000001byte 1210111011source-ip192.168.1.10destination-ip203.0.113.5protocol6source-port40000destination-port443(cont.)