Deep packet detection system and method based on software defined network

Abstract

The invention discloses a deep packet detection system and method based on a software defined network, and relates to the field of deep packet detection. The deep packet detection system includes network equipment which supports a DPI function, a DPI controller and a DPI server, wherein the network equipment which supports the DPI function is used for processing the part of the second layer to the fourth layer of a deep packet detection rule, the DPI server is used for processing the part above the fourth layer of the deep packet detection rule, and the DPI controller is used for controlling and coordinating the whole deep packet detection system, including the steps of synchronizing flow tables, configuring the network equipment which supports the DPI function and the deep packet detection rule on the DPI server, and coordinating the network equipment which supports the DPI function and the DPI server. The deep packet detection system based on the software defined network can improve the utilization rate of resources, and can also realize effective control of a DPI system, and the functions and performance of the DPI system are enhanced.

Description

technical field [0001] The invention relates to the field of deep packet detection, in particular to a software-defined network-based deep packet detection system and method. Background technique [0002] With the continuous development of the network, the scale of the network is constantly expanding, the number of users on the network is constantly increasing, and the types of applications and services provided by the network are constantly enriched, which makes the network more and more complex, and the operation and maintenance management of the network becomes more difficult. Security issues are also becoming more acute. On the one hand, all kinds of attacks exist in the network, all kinds of network garbage flood the network, and viruses and worms are constantly emerging, which have a major adverse effect on the health of the network. On the other hand, the traffic in the network is varied, and the occupation of resources is also quite different. According to the Pare...

AI Technical Summary

Problems solved by technology

Using independent devices to realize DPI functions has clear logic and strong scalability, but the precious resources on network devices that can be used to realize DPI functions are wasted

It is not enough to realize the DPI function only by means of network equipment, especially in network equipment designed on the basis of ASIC (Application Specific Integrated Circuit) or NPU (Network Processing Unit, Network Processing Unit), which processes the constantly changing information is very difficult

[0006] To sum up, the traditional DPI system is either an independent DPI device or a device embedded in the network. The independent DPI device wastes hardware resources in the device, and the device embedded in the network processes information above four layers. out of time

Images