DPI

Key Features

DPI is a hardware-software complex that controls the flow of network data, identifies protocols and applications, filters by URL, prevent intrusion attempts and spread malicious software by deep packet inspection data. DPI performs important safety functions by checking incoming packets, analyzing the code and transmitted data after their disassembly and decompression, for compliance with applications and services. If a malicious URL or code snippet is detected, the system is able to completely block it. DPI can also be used by service providers to provide subscribers different levels of access (type of use, data restriction, bandwidth), compliance with access rules, traffic prioritization, network load balancing and statistical information gathering.

As more and more software products go beyond the workstation and corporate resources using cloud technologies, network performance becomes critical for high productivity. DPI can recognize applications, which data pass through the system and allocate required resources to each of them.

IIn addition to DPI functions, the product has a number of additional integrated features. The system includes traffic filtering through the registry of blacklisted websites in accordance with current legislation and meets the requirements of the state regulator with automatic downloading blocking lists of URL SNI, CN, IP+PORT.

The solution supports filtering by Server Name Indication (SNI), blocking of HTTPS traffic on Common Name certificates and blocking by «*.domain.com» mask. For greater flexibility, it is possible to use own black and white lists. Silat has a full set of functions for working as L3 and L2 BRAS functionality and can also act as CGNAT with support Hairpinning, Paired IP address pooling and Full Cone. Simple integrate by Radius protocol with most populate billing systems.

BRAS with DPI allows using prioritizationin subscriber tariff plan. Silat have some level of prioritization: by protocols/applications and by directions (AS number). It is available for subscriber, Vlan or pair physicals ports and common channel. The system allows to pass messages to the subscriber while working on the Internet or redirect to the start page. DPI gives ISP channel to communicate with customers. Marketing programs allow to delivery news, promo or information about network failures.

The system has built-in protection against DoS and DDoS attacks, realizes fight against TCP SYN Flood, fragmented UDP Flood and supports the Turing test. Dynamic bandwidth management with protocol priorities is supported. Silat provides up to 15% savings on the uplink channels and fast delivery of audio and video content through the caching system. Thus, caching of Windows and iTunes updates is fully available.And it also possible to control the torrents by hash value, which significantly reduces the torrent traffic on the uplink channels.

Different Silat connectivity schemes are supported:

Silat QoE — this is a software product created for collecting statistics and assessing the quality of service perception (Quality of Experience – QoE). The resulting statistics is superimposed on specific metrics to determine user experience and take actions aimed at improving the quality of communication services.
Metrics

This solution allows broadband operator to control subscribers access to the Internet and apply the policies of tariff plans and additional tariff options. Silat  directly interacts with RADIUS server to obtain information about the authorized user, compares IP addresses with the tariff plan and additional services that are defined on the billing server.

Network Address Translation function allows the telecom operator to share one public IPv4 address with multiple subscribers, extend usage of the restricted IPv4 address space, and simplify passing to IPv6 addressing. Since DPI platform is designed for huge loads with deep traffic analysis, it can easily realize network address translation function (Carrier-Grade NAT), in addition to which the customer receives a full set of standard DPI tools.

     Silat DPI Brochure