Combined Packet Classification Lookup for Selective DPI
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network devices face performance degradation due to the computational overhead of deep packet inspection (DPI) classification rule lookups, which are necessary for determining the applicability of DPI-based rules to each packet, especially in real-time environments.
Innovation Solution
Implementing a combined lookup table that includes DPI classification data alongside shallow packet inspection data, allowing for a single lookup to determine if DPI-based rules apply, thereby reducing the need for separate DPI checks and optimizing resource usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If deep packet inspection classification rule lookups are performed for each packet to determine applicability of DPI-based rules, then packet classification accuracy is improved, but processing overhead increases and productivity decreases
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing DPI classification data in a combined lookup table before packet arrival. The system performs the computationally intensive DPI classification rule matching in advance during table population, so that when packets arrive, only a simple lookup is needed to determine rule applicability. This eliminates the need to perform DPI operations on every packet in real-time, thereby maintaining classification accuracy while dramatically improving processing throughput.
2Reliability
If separate DPI classification rule lookup is performed to determine if DPI rules apply to packets, then classification completeness is improved, but device complexity and processing time increase
Solution Approach 1:
The patent merges the shallow packet inspection data and DPI classification data into a single combined lookup table. Instead of maintaining separate data structures for shallow inspection results and separate DPI rule applicability information, the system combines both types of data into one unified table that can be populated and queried as a single entity. This reduces the complexity of managing multiple lookup mechanisms while ensuring that both shallow and DPI-based classification rules are applied completely and correctly.
3Reliability
If deep packet inspection is performed on all packets to determine rule applicability, then security policy enforcement is improved, but energy consumption and processing overhead increase
Solution Approach 1:
The patent extracts only the essential DPI classification data (rule applicability indicators) from the full DPI processing pipeline and stores them in the combined lookup table. Instead of performing complete DPI analysis on every packet, the system extracts pre-computed classification results that indicate whether DPI rules apply, based on shallow inspection criteria. This extraction approach ensures security policies are enforced correctly for packets that require DPI while avoiding unnecessary energy consumption on packets that can be handled by shallow inspection alone.
Data Source
AI summary
Systems and methods for determining whether to perform deep packet inspection (DPI) on packets received at a network device based on shallow packet inspection data are disclosed. Embodiments may include DPI classification data in a combined lookup table that is utilized for shallow packet data based packet classification at a network device. Using the results of lookups in such a combined look table based on received packets, determinations can be made whether to perform DPI on such received packets, and those packets forwarded accordingly.