Patent attributes
Techniques for controlling packet flows through the generation of packet flow rules are described. In an example, a network virtualization device receives network data. The network virtualization device determines a set of networks of a virtual network based on the network data. The network virtualization device receives flow data of the customer. The network virtualization device generates a packet flow rule based on the flow data and the set of networks. The packet flow rule defines a network boundary of one or more networks such that a first packet having a destination within the network boundary can flow and such that a second packet having a destination outside of the network boundary is to be dropped. The network virtualization device stores the packet flow rule in association with the compute instance.
