15. A device, comprising: a processor; and a memory coupled to the processor, wherein the memory comprises program instructions configured to: receive a plurality of packet flow rules from multiple network services, wherein each packet flow rule comprises a packet filter and an action list including one or more prioritized actions, wherein each network service has a priority, and wherein the packet flow rules from each network service comprise a priority expressed either by longest prefix, or ordered precedence; generate a unified rule set according to the received packet flow rules, wherein said generating comprises: identify conflicts between rule pairs, wherein each rule pair includes a higher priority rule and a lower priority rule; and resolve the identified conflicts according to a priority relationship between the higher priority rule and the lower priority rule.
15. A device, comprising: a processor; and a memory coupled to the processor, wherein the memory comprises program instructions configured to: receive a plurality of packet flow rules from multiple network services, wherein each packet flow rule comprises a packet filter and an action list including one or more prioritized actions, wherein each network service has a priority, and wherein the packet flow rules from each network service comprise a priority expressed either by longest prefix, or ordered precedence; generate a unified rule set according to the received packet flow rules, wherein said generating comprises: identify conflicts between rule pairs, wherein each rule pair includes a higher priority rule and a lower priority rule; and resolve the identified conflicts according to a priority relationship between the higher priority rule and the lower priority rule. 27. The device of claim 15 wherein the program instructions are further configured to install the unified rule set on a flow enforcement device configured to apply packet flows rules according to an ordered precedence priority policy.