Research And Implementation Of Deep Packet Inspection Technology

The rapid development of the Internet industry,not only promote the national information construction,but also brought a huge economic benefits.However,when people enjoy the rich content of the network,they also result in a sharp increase in the flow of traffic which puts forward higher requirements of network construction and management to the operator.The operators need to monitor and manage the excessive bandwidth of the network traffic,reduce the congestion of the network,and speed up the response of the business.And some Internet companies also need to find and deal with the abnormal traffic in the network,providing safe and reliable internet environment as well as differentiated services to users with different needs.The correct identification and classification of network traffic is the premise and key to solve these problems.Deep packet inspection technology analyzes the load of data packets in the application layer and identifies protocols and applications in the network.Compared with the traditional way,it has the advantages of high recognition accuracy,high degree of refinement,and so that is the key content of this paper.In view of the problem of expensive price,poor expansibility and narrow application fields of the existing network processor,this paper used the Raspberry Pi as a hardware platform designed a distributed deep packet inspection system,which has a high scalability and obvious advantages in flexible deployment,power consumption,price,volume,etc.,to provide better software and hardware support for enterprises and scientific research units with different scale and different needs.The specific innovations of this paper are as follows:The system adopts distributed architecture,which means that the processing units are independent of each other and complete the depth package detection task together.So the throughput capacity and computational performance of the system are improved.At the same time,this paper uses the characteristics of the distributed architecture toachieve a flexible deployment,which can provide a comprehensive network traffic according to the different needs of usersThe management server is capable of automatic discovery and unified management of the processing unit in network environment.By configuring different protocol identification parameters for each processing unit,the pattern matching task of the most cost system resource is allocated to the specific processing unit.According to the load of each detection unit,the management server distributes detection tasks reasonably and maximizes the use of the system resources.At last,this paper tests and compares the recognition function and expansibility of the system.The results show that the depth of the package detection system proposed in this paper can be flexible expanded and its recognition results are correct.Compared with other similar products,it has advantages and can meet the needs of different scale enterprise.