The invention provides an encrypted
traffic management and control method,
system and terminal based on eBPF and HTTPS, belongs to the technical field of data
encryption, and constructs a one-to-many management and control and one-to-one execution architecture. During starting, the eBPF module is initialized,
handshake messages are captured through multiple probes and a flow filter, and data are obtained and blocked. A strategy synchronization and instruction
transmission channel is established, and an Agent terminal obtains
a domain name strategy, sensitive word data and the like from a
server and synchronizes the
domain name strategy, the sensitive word data and the like to an eBPF module. And the eBPF module collects a connection
information mapping relation according to a strategy and cleans the connection
information mapping relation when the connection information is disconnected. And the HTTPS connection is audited or blocked in combination with the strategy and the collected information. The audit result is a log and reported to the
server for storage. And through a one-to-many management and control and one-to-one execution architecture, the expansibility and the execution efficiency of the
system are improved. And comprehensive data capture and accurate blocking are realized by multiple probes and a flow filter. A strategy synchronization mechanism ensures timely updating of the strategy, auditing and blocking functions guarantee
network security, and log reporting facilitates subsequent auditing analysis.