Method, device and system for implementing deep packet inspection optimization

A deep packet inspection and initialization technology, applied in the field of cloud computing, can solve problems such as inaccurate DPI analysis results, difficulty in undertaking software equipment, and inability to undertake all traffic data analysis tasks, so as to avoid inaccurate analysis and reduce the number.

Active Publication Date: 2020-03-20
CHINA TELECOM CORP LTD
View PDF3 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The DPI process has extremely high requirements for performance, and it is difficult for software equipment to undertake the corresponding work. If you introduce dedicated hardware for tenants, you need to pay a high price
At the same time, when the network traffic is too large, the DPI device may not be able to undertake the data analysis of all the traffic, so it has to randomly discard part of the traffic, which leads to inaccurate DPI analysis results

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method, device and system for implementing deep packet inspection optimization
  • Method, device and system for implementing deep packet inspection optimization
  • Method, device and system for implementing deep packet inspection optimization

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0065] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

[0066] figure 1 It is a flow chart of an embodiment of the deep packet inspection front-end device detection optimization method of the present invention. Such as figure 1 As shown, the method steps of the present embodiment are as follows:

[0067] Step 101, after receiving a data message through the network, query whether there is a policy rule corresponding to the data message in the rule table, wherein the policy rule included in the rule table is issued by t...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a method, device and system for realizing optimization of deep packet inspection, and relates to the field of cloud computing. The methods include: after the deep packet detection front-end device receives the data message through the network, query whether there is a policy rule corresponding to the data message in the rule table; if the policy rule corresponding to the data message is not found, Then send a policy request to the rule controller, so that the rule controller issues the policy rule corresponding to the data message; after receiving the policy rule, write the policy rule into the rule table; use the policy rule corresponding to the data message Rules process data packets. By introducing the SDN technology, the present invention controls the flow direction of the traffic that needs to be detected by DPI in units of data streams, reduces the number of data packets that need to be detected, realizes the on-demand deployment of DPI functions, and avoids random discarding of DPI devices in the prior art The problem of imprecise parsing caused by data packets.

Description

technical field [0001] The present invention relates to the field of cloud computing, in particular to a method, device and system for realizing optimization of deep packet inspection. Background technique [0002] DPI (Deep Packet Inspection) technology is a traffic detection and control technology based on the application layer information of the network protocol stack. Among them, the "depth" of its detection of data packets is compared with the ordinary packet analysis level. "Ordinary packet detection" usually only analyzes the content below the 4th layer of the network protocol stack, mainly including source address, destination address, source port, destination port and protocol type. It analyzes the application layer information, and then identifies various applications and their specific content. [0003] With innovative cloud services such as hybrid cloud (Hybrid Cloud) and virtual private cloud (Virtual Private Cloud, VPC), the demand for on-demand deployment of...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): H04L12/823H04L12/26H04L29/08H04L47/32
CPCH04L43/0829H04L47/323H04L69/329
Inventor 王和宇王峰
Owner CHINA TELECOM CORP LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products