System and method for deep packet inspection based on software-defined network

Abstract

The invention discloses a deep packet detection system and method based on a software defined network, and relates to the field of deep packet detection. The deep packet detection system includes network equipment which supports a DPI function, a DPI controller and a DPI server, wherein the network equipment which supports the DPI function is used for processing the part of the second layer to the fourth layer of a deep packet detection rule, the DPI server is used for processing the part above the fourth layer of the deep packet detection rule, and the DPI controller is used for controlling and coordinating the whole deep packet detection system, including the steps of synchronizing flow tables, configuring the network equipment which supports the DPI function and the deep packet detection rule on the DPI server, and coordinating the network equipment which supports the DPI function and the DPI server. The deep packet detection system based on the software defined network can improve the utilization rate of resources, and can also realize effective control of a DPI system, and the functions and performance of the DPI system are enhanced.

Description

Technical field [0001] The invention relates to the field of deep packet inspection, in particular to a deep packet inspection system and method based on a software-defined network. Background technique [0002] With the continuous development of the network, the scale of the network is constantly expanding, the number of users on the network is increasing, and the types of applications and services provided by the network are constantly enriched. This makes the network more and more complex, and the network operation and maintenance management becomes more difficult. Security issues have become increasingly acute. On the one hand, various attacks exist on the network, and various network spam floods the network, and viruses and worms continue to emerge, which have a significant adverse effect on the health of the network. On the other hand, the traffic in the network varies widely, and the occupation of resources is also quite different. According to the Pareto principle, 20% ...

AI Technical Summary

Problems solved by technology

Using independent devices to realize DPI functions has clear logic and strong scalability, but the precious resources on network devices that can be used to realize DPI functions are wasted

It is not enough to realize the DPI function only with the help of network equipment, especially in the network equipment designed based on ASIC (Application Specific Integrated Circuit) or NPU (Network Processing Unit, network processing unit), which processes the five-layer The information above is constantly changing and it is very difficult

[0006] To sum up, the traditional DPI system is either an independent DPI device or a device embedded in the network. The independent DPI device wastes hardware resources in the device, and the device embedded in the network processes information above five layers out of time

Images