An Implementation Of Application Recognition And Bandwidth Control Based On DPI

With the rapid development of Internet technology,network communication gradually developed as the main way that people communicate with each other. Network operators and Internet service providers is increasingly dependent on the network and the efficiency of the running application,which makes the traffic recognition and bandwidth control are becoming a hot spot of research.On the basis of study on the existing traffic recognition and bandwidth management technology, AC-OBAC algorithm is proposed which improves multiple pattern matching algorithm and bandwidth control based on application recognition is designed and implemented. The main works of this paper are as follows:1.Based on the research of AC algorithm,Bitmapped AC algorithm,Obitmapped AC algorithm and Optimized AC algorithm,we simulate and analyze the four algorithms. Simulation results show that matching efficiency of AC algorithm is high but memory consumption is large;memory consumption of Bitmapped AC is small but the matching efficiency is low;memory consumption and matching efficiency of Obitmapped AC algorithm are better than those of Bitmapped AC; memory consumption of Optimized AC algorithm is modetate but we can improve matching efficiency.2.AC-OBAC algorithm is proposed which improves multiple pattern matching algorithm.Pattern string divided into leading and following, and AC algorithm effectively combines Obitmapped AC algorithm.when a smaller value is selected as the threshold of layer number,and the threshold of layer number should be no less than the minimum characters number of pattern strings,the matching rate of the algorithm is faster and the memory consumption is minimal.The simulation results show compared with the traditional multiple pattern matching algorithm,AC-OBAC algorithm improve the matching efficiency with the moderate memory consumption.3.The bandwidth control module is designed, realizes the purpose of traffic management based on source security domain and security domain,source address, destination address, user, application, time range, and passes the experiment.4.With the WEB configuration module designed and implemented,the user can configure the policy of bandwidth through the WEB, which is easier to use.