DPI association rule backfill processing method, device and equipment and medium

Abstract

The invention provides a DPI association rule backfill processing method and device, equipment and a medium. The method comprises the steps of downloading all first association backfill rules from a local memory of a DPI acquisition machine when the DPI acquisition machine undertaking a service is monitored to be restarted, and recording a timestamp during restarting; sending the update request information with the timestamp to a designated DPI collector which does not undertake the service; storing an association backfill rule learned by a machine learning process into a REDIS database of themachine learning process, so as to update the association backfill rule in real time; according to the timestamp, the association backfill rule in the REDIS database from the time corresponding to the timestamp to the current time is used as a second association backfill rule to be returned to the DPI collector undertaking the service; recovering a local machine learning process of the associatedbackfill rule after restarting, and storing a third associated backfill rule learned by the machine in a local REDIS database in real time; and the DPI collector undertaking the service obtains a complete association backfill rule according to the first, second and third association backfill rules.

Description

technical field [0001] The present invention relates to the technical field of big data, in particular to a DPI association rule backfill processing method, device, equipment and medium. Background technique [0002] DPI (Deep Packet Inspection) means that the device detects and analyzes the traffic and packet content at the key points of the network, and can filter and control the detected traffic according to the pre-defined strategy to complete the business of the link. Fine-grained identification, business traffic flow analysis, business traffic proportion statistics, business proportion shaping, application layer denial of service attacks, virus and Trojan horse filtering, and P2P abuse control functions. Unified DPI means that a set of DPI equipment collects and identifies the traffic on the link, and distributes the traffic or analysis statistics required by other systems to the third-party application system servers. [0003] In the current unified DPI system of ope...

AI Technical Summary

Problems solved by technology

[0020] The embodiment of the present invention provides a DPI association rule backfill processing method, device, equipment and medium to solve the problems of large resource consumption and high cost in the prior art

Images