SDN DPI Deep Packet Inspection based Application Aware Traffic Control

SDN Packet Broker Deep Packet Inspection based Application Aware Traffic Control

DPI(Deep Packet Inspection) 

1- IDS intrusion detection system, IPS intrusion prevention system

2- Capture package analysis, real-time classification for different application traffic

3- IDS and IPS are now used for traffic classification, deployment of internal networks

4- SDN helps congestion control by reducing the sending rate of DCN's TCP senders

5- SDN make the flow control more effective and improve the delay, traffic jitter, throughput, stability, scalability and automation.

Application perception of SDN and differentiated service provision.

But, It is difficult to map application layer information characteristics to flow tables

When congestion occurs, due to the matching characteristics of each packet, the implementation of data plane application perception cannot meet the Qos requirements

Network Packet Broker Specification and Module Type

Solutions:

1- Use mind mapping to analyze the content of application layer packages, obtain traffic characteristics, identify their behaviors from relevant characteristics, and finally 2- develop differentiated services from different behaviors.

3- Application of perceptive traffic control solutions, including traffic behavior and network status.

4- Introduce DPI into control plane and expand flow table structure.

5- Realize traffic classification and matching by traffic behavior and deploy to switch,

6- Store DPI processing results in a separate location from the controller.

SDN Benefits as follows:

No.1 - SDN provides more flexibility for network use, control and how to generate revenue.

No.2 - SDN speeds up the introduction of new services.Network operators can deploy related features through controlled software, rather than waiting for a device provider to add a solution to its proprietary equipment.

No.3 - SDN reduces the operation cost and error rate of the network, because it realizes the automatic deployment and operation and maintenance fault diagnosis of the network and reduces the manual intervention of the network.

No.4 - SDN helps to realize the virtualization of the network, thus realizing the integration of computing and storage resources of the network, and finally enabling the control and management of the entire network to be realized through the combination of some simple software tools.

No.5 - SDN makes the network and all IT systems better oriented to business goals.

Background

1- There is a lack of traffic perception of the application layer in Openflow, which cannot meet the Qos requirements in the case of limited network congestion resources.DPI is introduced to propose a flow control scheme, including flow classification and flow behavior matching, which is integrated into the controller.The introduction of flow classification and matching mechanism in the intermediate device, the use of some mathematical models to evaluate the performance of the framework, and the use of simulation experiments to verify, can improve the throughput and reduce the end-to-end delay.

2- SDN treats the network as a collection of devices, not as a whole resource.Traffic measurement and control depend not only on network state but also on traffic behavior.In the case of network congestion and limited resources, Qos requirements cannot be met.A traffic control scheme is proposed in which both network state and traffic behavior can be utilized mutually.DPI, package classification and behavior matching were introduced.Pub /sub based on intermediate devices was designed to analyze network throughput and latency.Simulation results show that the design can improve throughput and reduce end-to-end latency.

3- SDN breaks the traditional OSI architecture, southbound API, Openflow defines secure channel connection data plane and control plane, pipeline acceleration packet forwarding.The more traffic is identified, the more granular the flow control rules can be created.

What's the Matrix Modular Designed Plug-in Network Packet Broker to do?

With the acceleration of carrier broadband construction and the rapid development of 3G, 4G, and 5G networks, and with the popularity and development of big data and cloud computing technologies, data traffic is growing, and the bandwidth requirements for backbone networks and core networks are increasing. Since 2013, the major operators have begun to gradually upgrade the backbone network. The core backbone network transmission link media starts to be expanded from 10GPOS and 40GPOS links to 100G Ethernet links. It will inevitably lead to the continuous updating of big data collection and analysis technology. In the face of 100GE link environment with high bandwidth capacity, how to effectively meet the requirements of various national security, network security monitoring, operator intelligent pipeline DPI data collection and analysis will become a hot spot in the field of data acquisition and analysis.
Chengdu Shuwei Communication is following the development direction of the Internet and develop the MATRIX-TCA-CG Traffic Acquisition(Traffic Capture) Visibility System, and dedicated to the traffic collection and visual analysis application requirements on 1GE, 10GE, 10G/40G POS, 40GE and 100GE links. The MATRIX-TCA-CG integrates free-steering output functions such as network flow collection/acquisition, aggregation, filtering, forwarding/distribution, and load balancing and provides an efficient solution for the flow analysis.
 
Matrix-TCA-CG is a network data visualization control device for high density and large flow of 10G/40G/100G.
Matrix-TCA-CG is specially designed for the data collection of 10GE 40GE and 100GE links distributed intensively in operators mobile Internet export, IDC export, provincial network and backbone.
Based on ATCA standard architecture, MATRIX-TCA-CG has high carrier-level reliability and strong expansibility which can smoothly configure the functional board CARDS to cope with port demand scenarios of various specifications and sizes.