Design And Implementation On DPI-Based Network Traffic Identification And Control System

With the fast development of Internet technology, various new applications emerge one after another; network has been from the past traditional Web, FTP, SMTP, Telnet, etc, to P2 P.Until now, such as P2 P, VoIP and streaming media are mainly applications. New applications take a lot of network traffic, making the bandwidth resource is becoming more and more limited, also more and more malicious attacks on the network behavior appear. In addition,some enterprises want to limit employees for private use of company network online behavior during the working hours. In order to solve these difficulties and the market demand, realize the network traffic visual control, and ensure transparency and security of communication system has very important application value.According to the above problem, this paper studied and analyzed the flow recognition and flow control technology so as to design and realizes a kind of simple and effective traffic identification and control system based on the Deep Packet Inspection technology(Deep Packet Inspection, DPI). To complete the overall architecture of the system design, this paper expounds the function of each module and concrete implementation method of the design by using the characteristics of the precise strings and regular expressions library description way,choose the optimized matching engine, finally after the system function test verified the performance of the system.