Research On SDN Deep Packets Inspection Technology

With the development of network technology,the deep packet inspection technology meets a lot of problems in the application.In this paper,the DPI technology is combined with the SDN/NFV technology to design a new deep packet inspection architecture and develop DPI device rules base in order to solve DPI deployment problems and unify the rules base data formats and the identification granularity.The research is very important to get rid of dependence on equipment manufacturers,unify DPI deploy and solve DPI deployment problems.The main work of this paper is as follows:1)the overall design is completed based on the SDN Deep Packet Inspection architecture,including basic architectural design and overall functional definition.2)the function definition and architecture design is completed of each module unit in the Deep Packet Inspection Architecture,including the Deep Packet Detection Unit,Data Collector,Forwarding Device,Controller and Application Layer.And the architectural details of each module is defined and designed.3)The basic process design of deep packet inspection is completed,and the realization process of common service is designed in detail,which include signaling monitoring service,internet log retention,traffic flow analysis,flow control.And the comparison is made between the old and the new architecture.4)The overall development and design are completed of the DPI rule base module,including selecting the matching algorithm,defining the rule form,extracting the rule method,designing the grammar fonnat and writing format,designing the rule base optimization mechanism;5)In the laboratory,with the Sprient instrument connected the DPI equipment to simulate the interaction between the client and the server,the business identification accuracy testing is accomplished on the rules library and a good result is achieved.