A network traffic control method and control system based on dfi and dpi

Abstract

The invention discloses a network flow control method and control system based on DFI and DPI, relates to the technical field of network data transmission, and is used to reduce the identification burden of network flow and improve the identification stability and identification efficiency of network flow. The network traffic control method includes: obtaining service identification information of network traffic, and formulating a traffic identification control strategy according to the service identification information; configuring a sample module according to the traffic identification control policy, and controlling a DFI identification unit and / or a DPI identification unit to perform network traffic Detection and identification; the DFI identification unit and / or DPI identification unit obtains the network traffic identification result, and stores the network traffic identification result to the data exchange module; the data exchange module feeds back the network traffic identification result to the traffic identification control module. The network traffic control method and control system based on DFI and DPI provided by the present invention are used for network traffic identification.

Description

technical field [0001] The invention relates to the technical field of network data transmission, in particular to a DFI and DPI-based network flow control method and control system. Background technique [0002] Deep / Dynamic Flow Inspection (Deep / Dynamic Flow Inspection, hereinafter referred to as DFI) and Deep Packet Inspection (Deep Packet Inspection, hereinafter referred to as DPI) belong to two different identification technologies. Among them, DFI is used to identify various service types according to the characteristics corresponding to different service types of traffic, and DPI is used to deeply identify the content and payload of data packets. [0003] In the existing network traffic identification technology based on DFI and DPI, the DFI sample module and the DPI sample module are set independently; the DFI identification unit obtains the service characteristics of the network traffic and the DFI sample characteristics of the DFI sample module, and compares the tw...

AI Technical Summary

Problems solved by technology

[0004] However, since there is no corresponding coordination control mechanism between the DFI identification unit and the DPI identification unit, when using the existing network traffic identification technology based on DFI and DPI, it is easy for the same network traffic to be identified separately by the DFI identification unit and the DPI identification unit phenomenon, or the phenomenon that the network traffic that does not need to be recognized by the DPI recognition unit is recognized by the DPI recognition unit, etc., resulting in redundant recognition processes in the recognition process of network traffic, which not only reduces the recognition efficiency of network traffic, but also increases The identification burden of network traffic affects the stability of network traffic identification

Images