DPI identification method and device, computer equipment and storage medium

Abstract

The invention discloses a DPI identification method and device, computer equipment and a storage medium. The DPI identification method comprises the steps that a gateway module receives a target datamessage; a DPI identification engine carries out lightweight identification on the target data message, and judges whether a target application name can be determined or not, and only a destination address, a destination port and a protocol type in the target data message are analyzed through lightweight identification; if yes, a target application name is obtained through search, and if not, thetarget data message is sent to a DPI deep identification module; a DPI deep identification engine performs deep identification to obtain a target application name, and sends the target data message and the target application name to the gateway module; and the gateway module writes the corresponding relationship between the received target data message and the target application name into a firstapplication name corresponding relationship table. The DPI identification engine is integrated in the gateway module, so that the gateway module and the DPI deep identification module are prevented from processing a data message twice, and the reliability and the identification rate of the gateway module are improved.

Description

technical field [0001] The present application relates to the field of communication technology, and in particular to a DPI identification method, device, computer equipment and storage medium. Background technique [0002] Deep Packet Inspection (DPI) technology is the most basic and important means of implementing traffic management, and has been deployed in large numbers in carrier networks. On the basis of analyzing the packet header, the DPI technology adds the analysis of the application layer, which is a flow detection technology based on the application layer. [0003] The existing method for DPI identification of the application name is specifically to send all the data messages contained in the session information to the DPI deep identification module after being processed by the gateway module, and the DPI deep identification module performs deep identification on the data messages to obtain the application However, this method has the following defects: the gate...

AI Technical Summary

Problems solved by technology

[0003] The existing method for DPI identification of the application name is specifically to send all the data messages contained in the session information to the DPI deep identification module after being processed by the gateway module, and the DPI deep identification module performs deep identification on the data messages to obtain the application However, this method has the following defects: the gateway module needs to synchronize account information with the DPI deep recognition module to maintain consistency; the data packets need to be processed twice by the gateway module and the DPI deep recognition module respectively, so more In addition, the implementation of the control function is more complicated. Since the DPI depth recognition module is in bypass mode, its ability to control data packets is limited, and the gateway module is required to implement serial From the perspective of control business, there is business coupling between the gateway module and the DPI deep recognition module

Images