Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
en:dpi:dpi_options:opt_filtration:filtration_common:start [2024/08/06 08:53] – elena.krasnobryzh | en:dpi:dpi_options:opt_filtration:filtration_common:start [Unknown date] (current) – removed - external edit (Unknown date) 127.0.0.1 | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== General description ====== | ||
- | {{indexmenu_n> | ||
- | |||
- | <note important> | ||
- | |||
- | Required components: | ||
- | - [[en: | ||
- | |||
- | Advantages: | ||
- | |||
- | **1) Easy to use:** | ||
- | * all rules are applied at one place: on DPI platform; | ||
- | * the platform loads and applies rules from lists by itself. | ||
- | **2) Productivity: | ||
- | * the list includes up to 4 billion URL. Its representation in memory is compressed; | ||
- | * provides filtering of up to 2 million URL per second on one CPU kernel; | ||
- | * traffic capacity up to 40 Gb per second per one CPU; | ||
- | * unlimited scaling by simple installation of additional servers; | ||
- | * propagation delay is less than 30 μs. | ||
- | **3) Functionality: | ||
- | * http and https support. Other protocols can be added; | ||
- | * filtering for HTTP proxy is supported (including Opera Turbo/ | ||
- | * the software can consider or ignore the port number (i.e. block http:// | ||
- | * does not depend on IP address changes; | ||
- | * redirection instead of blocking is supported for http; | ||
- | * incapsulation of VLAN, QinQ, MPLS is supported; | ||
- | * support of asymmetric traffic routes, including processing of outbound traffic only; | ||
- | * support of mirrored traffic; | ||
- | * provides many other useful capabilities, | ||
- | **4) "Four nine' | ||
- | * works 24×7 with no breaks and service delays; | ||
- | * uptime of the systems already installed is many months; | ||
- | * the Bypass mode is supported to calm the operator. | ||
- | **5) Cost saving:** | ||
- | * DPI runs on a general purpose computer; | ||
- | * support costs are almost zero - everything is automated; | ||
- | * no need to waste money and time to develop and support own solution; | ||
- | * a proxy hardware would cost much more to achieve the similar traffic capacity. | ||