Method, system and device for packet filtering

Abstract

The invention provides a message filtration method and a system and equipment thereof; DPI proxy servers which are arranged at the user side of the access network identify the service type and / or content of the received data message and then DPI filtration is implemented on the data message according to the set DPI filtration strategy and the identified service type and / or content. By adopting the mode, the DPI proxy servers can be distributed at the user side of the access network and the received data messages are only the messages transmitted by the user equipment of the corresponding user network; compared with the DPI servers which are arranged at the boundary of the core network and the access network, the data message flow which needs to be processed is reduced; therefore, the real-time deep packet inspection on the data message can be guaranteed.

Description

technical field [0001] The invention relates to network broadband technology, in particular to a message filtering method, system and equipment. Background technique [0002] The emergence of network broadband technology not only brings opportunities to operators, but also brings problems to be solved, such as difficulties in management caused by unrecognizable broadband services, inability to realize content billing, and inability to meet the needs of information security. This makes deep packet inspection technology emerge as the times require. [0003] Deep Packet Inspection (DPI, Deep Packet Inspection) is a new technology relative to ordinary packet analysis. Ordinary packet inspection only analyzes the content below the application layer of IP packets, that is, according to the five-tuple of received data packets , performing flow classification on each received data packet to determine the flow type to which each data packet belongs, wherein the quintuple of the data...

AI Technical Summary

Problems solved by technology

Since the access network may contain multiple access nodes (AN, Access Node), one AN may receive data sent by multiple user equipment (UE, User Equipment) in multiple customer premise networks (CPN, Customer Premise Network) In other words, all data packets from the access network are processed centrally by the DPI server, which causes a large flow of data packets processed by the DPI server, which makes it difficult to guarantee the real-time performance of the data packets processed by the DPI server , and has high requirements for the centralized processing capability of the DPI server

Images