tcp流程所经历的layer
https://docs.microsoft.com/en-us/windows/win32/fwp/tcp-packet-flows
udp流程所经历的layer
https://docs.microsoft.com/en-us/windows/win32/fwp/udp-packet-flows
ALE Stateful Filtering
ALE 有状态筛选只对属于 ALE 流的第一个数据包进行分类,这可以减少所需分类的数目。 相比之下,非状态筛选需要对经过网络的每个数据包进行分类。
由于策略更改可能需要阻止以前允许的连接,因此当策略发生更改时,ALE 流需要 重新授权 。
ALE stateful filtering reduces drastically the number of required classifications by classifying only the first packet that belongs to an ALE flow. By comparison, non-stateful filtering requires classification of every packet that traverse the network.