Network functions are widely deployed in modern networks, providing various network services ranging from intrusion detection to HTTP caching, for the purpose of performance, security or policy compliance. According to a recent survey [6], network function deployments are ubiquitous: on par with the number of L3 infrastructures. Application or user requirements may specify policies that require flows traverse through a give sequence of networks functions, called policy enforcement.