The tuple carries a protocol byte and two port numbers.

highlighted = computed this step

Protocol names the next rule test

The protocol byte is 6, which this toy table names TCP.

protocol=6\text{protocol}=6
Protocol and portsThe firewall tuple is decoded from exact pinned bytes.Tuple fields104 bits / 13 bytes0xc0a8010acb007105069c4001bbbyte 0byte 1byte 2byte 311000000101010000000000100001010byte 4byte 5byte 6byte 711001011000000000111000100000101byte 8byte 9byte 10byte 1100000110100111000100000000000001byte 1210111011source-ip192.168.1.10destination-ip203.0.113.5protocol6source-port40000destination-port443(cont.)

Ports are exact integers

The tuple carries source port 40000 and destination port 443.

4000044340000\rightarrow443
Protocol and portsThe firewall tuple is decoded from exact pinned bytes.Tuple fields104 bits / 13 bytes0xc0a8010acb007105069c4001bbbyte 0byte 1byte 2byte 311000000101010000000000100001010byte 4byte 5byte 6byte 711001011000000000111000100000101byte 8byte 9byte 10byte 1100000110100111000100000000000001byte 1210111011source-ip192.168.1.10destination-ip203.0.113.5protocol6source-port40000destination-port443(cont.)

This is only a tuple

The tuple has no memory of prior packets. It is just the pinned fields the ordered rules will test.

fields=5\text{fields}=5
Protocol and portsThe firewall tuple is decoded from exact pinned bytes.Tuple fields104 bits / 13 bytes0xc0a8010acb007105069c4001bbbyte 0byte 1byte 2byte 311000000101010000000000100001010byte 4byte 5byte 6byte 711001011000000000111000100000101byte 8byte 9byte 10byte 1100000110100111000100000000000001byte 1210111011source-ip192.168.1.10destination-ip203.0.113.5protocol6source-port40000destination-port443(cont.)

Summary

For this toy decision, protocol and ports are checked as exact small integers.

destination port=443\text{destination port}=443
Protocol and portsThe firewall tuple is decoded from exact pinned bytes.Tuple fields104 bits / 13 bytes0xc0a8010acb007105069c4001bbbyte 0byte 1byte 2byte 311000000101010000000000100001010byte 4byte 5byte 6byte 711001011000000000111000100000101byte 8byte 9byte 10byte 1100000110100111000100000000000001byte 1210111011source-ip192.168.1.10destination-ip203.0.113.5protocol6source-port40000destination-port443(cont.)