A packet processing method, comprising the steps of : obtaining (S510), by a packet processing apparatus, a first packet, wherein the first packet comprises first indication information, the first indication information is used to indicate a data flow corresponding to the first packet, the packet processing apparatus stores an integrated flow table, the integrated flow table comprises at least one flow entry, each of the at least one flow entry comprises a unified match entry and a comprehensive behavior entry, the unified match entry uniquely identifies a data flow, and the comprehensive behavior entry is used to indicate at least one operation performed on a packet in the data flow identified by the unified match entry; determining (S520) a target flow entry in the integrated flow table based on the first indication information, wherein a unified match entry of the target flow entry identifies the same data flow as indicated by the first indication information; and performing (S530) the at least one operation on the first packet based on a comprehensive behavior entry comprised in the target flow entry; wherein the comprehensive behavior entry comprises information used to indicate a connection track CT operation and a virtual extensible local area network VxLAN encapsulation operation, and the step of performing the at least one operation on the first packet based on a comprehensive behavior entry comprised in the target flow entry comprises the steps of performing the CT operation on the first packet based on the information indicating the CT operation in the comprehensive behavior entry; performing, based on the information indicating the VxLAN encapsulation operation in the comprehensive behavior entry, the VxLAN encapsulation operation on the first packet obtained after the CT operation, to generate a third packet; and sending the third packet. obtaining (S510), by a packet processing apparatus, a first packet, wherein the first packet comprises first indication information, the first indication information is used to indicate a data flow corresponding to the first packet, the packet processing apparatus stores an integrated flow table, the integrated flow table comprises at least one flow entry, each of the at least one flow entry comprises a unified match entry and a comprehensive behavior entry, the unified match entry uniquely identifies a data flow, and the comprehensive behavior entry is used to indicate at least one operation performed on a packet in the data flow identified by the unified match entry; determining (S520) a target flow entry in the integrated flow table based on the first indication information, wherein a unified match entry of the target flow entry identifies the same data flow as indicated by the first indication information; and performing (S530) the at least one operation on the first packet based on a comprehensive behavior entry comprised in the target flow entry; wherein the comprehensive behavior entry comprises information used to indicate a connection track CT operation and a virtual extensible local area network VxLAN encapsulation operation, and the step of performing the at least one operation on the first packet based on a comprehensive behavior entry comprised in the target flow entry comprises the steps of performing the CT operation on the first packet based on the information indicating the CT operation in the comprehensive behavior entry; performing, based on the information indicating the VxLAN encapsulation operation in the comprehensive behavior entry, the VxLAN encapsulation operation on the first packet obtained after the CT operation, to generate a third packet; and sending the third packet. <EOS>