Abstract: A technique for packet ingress processing and packet egress processing in an OpenFlow, OF, switch is presented. A method aspect directed to packet ingress processing comprises receiving a packet at an OF port. The packet is associated with one of multiple logical flow entities, such as logical ports, allocated to the OF port. In a next step, the logical flow entity associated with the received packet is determined. Then, metadata for the packet is tagged with an identifier for the logical flow entity associated with the packet. The tagging controls handling of the packet at egress processing. The packet handling, in turn, may include a selective dropping or passing of the packet.