Deep Packet Inspection Result Propagation via Header Extension
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Deep packet inspection (DPI) services in networks experience delays due to the need for each network element to identify and process data packets, leading to increased latency and maintenance costs.
Innovation Solution
A method and device for spreading DPI results by inserting identification results into the header extension field of data packets, allowing downstream devices to acquire identification information without performing packet identification, thus reducing the need for repeated processing across the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If DPI identification is performed on each network element, then identification accuracy is improved, but network delay increases
Solution Approach 1:
The identification function network element performs DPI identification in advance and inserts the identification result into the packet header extension field before forwarding. Downstream network elements can directly use this pre-inserted identification result without performing repeated identification, thereby resolving the contradiction between identification accuracy and network delay.
Solution Approach 2:
The identification result is extracted from the DPI process and placed into the packet header extension field. This allows downstream elements to access identification information without executing the full identification process, reducing time loss while maintaining identification accuracy.
2Reliability
If DPI function is deployed on each network element, then service reliability is improved, but device complexity increases
Solution Approach 1:
The identification function is extracted from all network elements and concentrated in a dedicated identification function network element. Other network elements only need to read the identification result from the packet header, significantly reducing their complexity while maintaining service reliability through the propagated identification information.
Solution Approach 2:
The packet header extension field acts as an intermediary carrier that transmits identification results from the identification function network element to downstream elements. This intermediary mechanism allows downstream elements to obtain reliable identification information without implementing complex DPI functions themselves.
3Productivity
If identification results are cached locally, then processing speed is improved, but information accuracy deteriorates
Solution Approach 1:
The packet header extension field serves as a reliable intermediary that carries the latest identification result from the identification function network element to downstream elements. This ensures that downstream elements always access accurate, up-to-date identification information rather than relying on potentially outdated local caches.
Solution Approach 2:
The identification result is preliminarily inserted into the packet header by the identification function network element before the packet reaches downstream elements. This preliminary action ensures that accurate identification information is readily available to downstream elements without requiring them to maintain or update local caches, thus maintaining both speed and accuracy.
Data Source
AI summary
The present invention discloses a method for spreading a deep packet inspection result. The method includes: receiving, by an identification function network element, a data packet in IP network traffic; identifying the data packet; if the identification succeeds, save a first identification result obtained through identification in a local flow table of the identification function network element, and insert the first identification result in an extension field of the header of the data packet; if the identification fails, insert a second identification result in the header extension field of the data packet; send the data packet carrying the first identification result or the second identification result to a first downstream device. By means of the present invention, DPI service identification does not need to be performed on all network elements, thereby reducing a delay in executing a DPI service in an entire network and lowering a maintenance cost.