Design And Implementation Of DPI Network Traffic Identification And Control System Based On X86 Switch

In the Internet plus Times,the networking brings people great convenience,and also brings people great security threats at the same time.As the time of more and more termination,smart devices and Io L devices accessed to the Internet,more and more privacy and property safety of people are exposed to the networks.Furthermore,in the recent years,the technology of P2 P has been deployed rapidly,for its high performance and robustness.And P2 P is widely used in the field such as file sharing,video streaming and so on.According to the development of technology,and the unchecked spreading of sharing anything,it brought lots of serious problems on copyright protection,privacy leaking and other security threats on Internet.Under these circumstance,the requirements for accurate-indentify,analysis and control becomes more and more urgently.Moreover,as the spreading of the IM(Instant Messaging)application such as Weichat,QQ and Skype,the emerging VOIP based ways of communication,have great impact to the traditional telephone and audio business.This means that the decline in profitability for Telecom Operators and ISPs.This paper aims at the research and design for a switch system,and the system will integrate the Deep Packet Inspection(DPI)base on the flexible flow controlled by openflow protocol running on X86 platform switch.The main tasks include:(1)Researching and comparative analysis about the traditional traffic identification and classification related technology.(2)Researching about SDN and Openflow technology,and then providing the character of Openflow switch,which will include the architecture and protocol processing pipeline.(3)Providing the significance of X86 platform based switch system and the basic architecture of Openflow and DPI convergence.(4)The high level design of the new type of traffic identification and control system based on the above research and analysis.(5)The detail design and implementation according to the overall design,and then research deployment of the system.(6)The functionality testing and performance analysis of the system.