dpi identification method, device, computer equipment and storage medium

Abstract

The present application discloses a DPI identification method, device, computer equipment and storage medium. The DPI identification method includes: receiving the target data message by the gateway module; performing light-weight identification on the target data message through the DPI identification engine, and judging whether it can Determine the target application name, and the lightweight identification only analyzes the destination address, destination port and protocol type in the target data message; if so, find the target application name, if not, send the target data message to the DPI deep recognition module; The target application name is obtained through in-depth recognition by the DPI deep recognition engine, and the target data message and the target application name are sent to the gateway module; the gateway module writes the corresponding relationship between the received target data message and the target application name into the first application name Correspondence table. By integrating the DPI identification engine in the gateway module, the gateway module and the DPI deep identification module are prevented from processing the data message twice, and the reliability and identification rate of the gateway module are improved.

Description

technical field [0001] The present application relates to the field of communication technology, and in particular to a DPI identification method, device, computer equipment and storage medium. Background technique [0002] Deep Packet Inspection (DPI) technology is the most basic and important means of implementing traffic management, and has been deployed in large numbers in carrier networks. On the basis of analyzing the packet header, the DPI technology adds the analysis of the application layer, which is a flow detection technology based on the application layer. [0003] The existing method for DPI identification of the application name is specifically to send all the data messages contained in the session information to the DPI deep identification module after being processed by the gateway module, and the DPI deep identification module performs deep identification on the data messages to obtain the application However, this method has the following defects: the gate...

AI Technical Summary

Problems solved by technology

[0003] The existing method for DPI identification of the application name is specifically to send all the data messages contained in the session information to the DPI deep identification module after being processed by the gateway module, and the DPI deep identification module performs deep identification on the data messages to obtain the application However, this method has the following defects: the gateway module needs to synchronize account information with the DPI deep recognition module to maintain consistency; the data packets need to be processed twice by the gateway module and the DPI deep recognition module respectively, so more In addition, the implementation of the control function is more complicated. Since the DPI depth recognition module is in bypass mode, its ability to control data packets is limited, and the gateway module is required to implement serial From the perspective of control business, there is business coupling between the gateway module and the DPI deep recognition module

Images