Network Packet Broker Open Source DPI Deep Packet Inspection for SDN with DPI

Network Packet Broker Open Source DPI Deep Packet Inspection for SDN with DPI

Background

1- There is a lack of traffic perception of the application layer in Openflow, which cannot meet the Qos requirements in the case of limited network congestion resources.DPI is introduced to propose a flow control scheme, including flow classification and flow behavior matching, which is integrated into the controller.The introduction of flow classification and matching mechanism in the intermediate device, the use of some mathematical models to evaluate the performance of the framework, and the use of simulation experiments to verify, can improve the throughput and reduce the end-to-end delay.

2- SDN treats the network as a collection of devices, not as a whole resource.Traffic measurement and control depend not only on network state but also on traffic behavior.In the case of network congestion and limited resources, Qos requirements cannot be met.A traffic control scheme is proposed in which both network state and traffic behavior can be utilized mutually.DPI, package classification and behavior matching were introduced.Pub /sub based on intermediate devices was designed to analyze network throughput and latency.Simulation results show that the design can improve throughput and reduce end-to-end latency.

3- SDN breaks the traditional OSI architecture, southbound API, Openflow defines secure channel connection data plane and control plane, pipeline acceleration packet forwarding.The more traffic is identified, the more granular the flow control rules can be created.

SDN Benefits as follows:

No.1 - SDN provides more flexibility for network use, control and how to generate revenue.

No.2 - SDN speeds up the introduction of new services.Network operators can deploy related features through controlled software, rather than waiting for a device provider to add a solution to its proprietary equipment.

No.3 - SDN reduces the operation cost and error rate of the network, because it realizes the automatic deployment and operation and maintenance fault diagnosis of the network and reduces the manual intervention of the network.

No.4 - SDN helps to realize the virtualization of the network, thus realizing the integration of computing and storage resources of the network, and finally enabling the control and management of the entire network to be realized through the combination of some simple software tools.

No.5 - SDN makes the network and all IT systems better oriented to business goals.

Introduction to DPI Technology

What is DPI?

DPI(Deep Packet Inspection) technology is based on the traditional IP Packet Inspection technology (detection and analysis of Packet elements contained between OSI l2-l4), which adds application protocol recognition, Packet content detection and depth decoding of application layer data.

By capturing the original packets of network communication, DPI technology can use three kinds of detection methods: "eigenvalue" detection based on application data, recognition detection based on application layer protocol, and data detection based on behavior pattern.According to different detection methods, unpack and analyze the abnormal data that may be contained in the communication packet one by one to dig out the subtle data changes in the macro data flow.

DPI supports the following applications:

• the ability to manage traffic, or control end-user applications such as point-to-point applications

• security, resources, and licensing control

• policy enforcement and service enhancements, such as personalization of content or content filtering

The benefits include increased visibility into network traffic, which allows network operators to understand usage patterns and link network performance information to providing usage base billing and even acceptable usage monitoring.

DPI can also reduce the overall cost of the network by reducing operating expenses (OpEx) and capital expenditures (CapEx) by providing a more complete picture of how the network is operating and the ability to direct or intelligently prioritize traffic.

What's the Matrix Modular Designed Plug-in Network Packet Broker to do?
With the acceleration of carrier broadband construction and the rapid development of 3G, 4G, and 5G networks, and with the popularity and development of big data and cloud computing technologies, data traffic is growing, and the bandwidth requirements for backbone networks and core networks are increasing. Since 2013, the major operators have begun to gradually upgrade the backbone network. The core backbone network transmission link media starts to be expanded from 10GPOS and 40GPOS links to 100G Ethernet links. It will inevitably lead to the continuous updating of big data collection and analysis technology. In the face of 100GE link environment with high bandwidth capacity, how to effectively meet the requirements of various national security, network security monitoring, operator intelligent pipeline DPI data collection and analysis will become a hot spot in the field of data acquisition and analysis.
Chengdu Shuwei Communication is following the development direction of the Internet and develop the MATRIX-TCA-CG Traffic Acquisition(Traffic Capture) Visibility System, and dedicated to the traffic collection and visual analysis application requirements on 1GE, 10GE, 10G/40G POS, 40GE and 100GE links. The MATRIX-TCA-CG integrates free-steering output functions such as network flow collection/acquisition, aggregation, filtering, forwarding/distribution, and load balancing and provides an efficient solution for the flow analysis.

Matrix-TCA-CG is a network data visualization control device for high density and large flow of 10G/40G/100G.
Matrix-TCA-CG is specially designed for the data collection of 10GE 40GE and 100GE links distributed intensively in operators mobile Internet export, IDC export, provincial network and backbone.
Based on ATCA standard architecture, MATRIX-TCA-CG has high carrier-level reliability and strong expansibility which can smoothly configure the functional board CARDS to cope with port demand scenarios of various specifications and sizes.

Network Packet Broker Specification and Module Type

Machine Specification

NetTAP® (Full named Chengdu Shuwei Communication Technology Co., Ltd.)was established in 2007. Focusing on the Research and Development of Network TAPs/NPBs Communication Equipment, Data Security Analysis Equipment, which provides products and solutions in Big Data Acquisition, Data Storage, Data Monitoring, Data Processing and Data Analysis for Telecom, TV Broadcasting, Government, Education, IT, Finance, Bank, Hospital, Transportation, Energy, Power, Petroleum, Enterprise and other industries.

NetTAP® has launched various types of high-density devices such as: Fast Gigabit, 10 Gigabit Ethernet Network Traffic Replication, Aggregation, Distribution Network TAPs/NPBs (Network Packet Broker), intelligent Hybrid Traffic Network TAPs, 25G, 40G, 100G, etc. high density and Performance Network TAPs/NPBs(Network Packet Broker).

NetTAP® has a hardware production plant, all the communication products have complete Software and Hardware Independent Intellectual Property Rights, with complete Copyright Registration and Product Certification.

MATRIX NetInsight™ - A Fully Function Network Visibility Control Platform

MATRIX NetInsight™ Network System Value

1- Data Acquisition with centralized planning, eliminate monitoring blind spot

2- Free distribution of data, saving analysis of the overall investment

3- Data Security Control, Reduce the risk of disclosure

4- Overall Traffic visible, Abnormal Located more accurate, Fault analysis more useful

MATRIX NetInsight™ Function Architecture

1- User Interaction Layer

2- Big Data Analysis Layer

3- Data Storage Layer

4- Analysis Visibility Layer

5- Data Acquisition Layer

Zain Cloud Project of Saudi Arabia Telecom