List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
cartographerxmp527012.2Network servicesBuilt-inAs neededA protocol for Cartographer XML-based mapping or data visualization over networks.
cuelink527112.2Network servicesBuilt-inAs neededA protocol for CueLink, linking devices or services in CueLink networks.
cuelink-disc527112.2Network servicesBuilt-inAs neededA protocol for CueLink Discovery, discovering CueLink networked devices.
pk527212.2Network servicesBuilt-inAs neededPublic Key service protocol manages key distribution and revocation telemetry.
xmpp-bosh528012.2Network servicesBuilt-inAs neededXMPP over BOSH (Bidirectional-streams Over Synchronous HTTP) enables XMPP via web transport.
undo-lm528112.2Network servicesBuilt-inAs neededLicense manager protocol for Undo software's time-travel debugging tools.
transmit-port528212.2Application serversBuilt-inAs neededTransmit-Port handles encrypted data transfers in enterprise file synchronization software.
presence529812.2Instant messengersBuilt-inAs neededPresence protocol transmits user availability and status in messaging systems.
nlg-data529912.2Data transferBuilt-inAs neededNLG-Data manages natural language generation output in secure backend processing systems.
hacl-hb530012.2Data transferBuilt-inAs neededHACL-HB provides encrypted heartbeat signaling in high-availability cluster configurations.
hacl-gs530112.2Data transferBuilt-inAs neededHACL-GS is the group state protocol managing secure membership in HA Linux clusters.
hacl-cfg530212.2Data transferBuilt-inAs neededHACL-Cfg protocol handles secure configuration propagation in Linux-based HA clusters.
hacl-probe530312.2Data transferBuilt-inAs neededHACL-Probe protocol checks node health and service status in clustered environments.
hacl-local530412.2Data transferBuilt-inAs neededHACL-Local provides secure cluster node coordination in high availability Linux environments.
hacl-test530512.2Data transferBuilt-inAs neededHACL-Test is a diagnostic protocol for testing high availability cluster links and configs.
sun-mc-grp530612.2Network servicesBuilt-inAs neededMulticast group management for Sun Management Center telemetry buses.
sco-aip530712.2Network servicesBuilt-inAs neededSCO Audio IP protocol for legacy terminal and VoIP integration.
cfengine530812.2Network servicesBuilt-inAs neededA protocol for CFEngine, managing configuration in CFEngine networked systems.
jprinter530912.2PrintingBuilt-inAs neededA Java-based print service for managing print jobs
outlaws531012.2Network servicesBuilt-inAs neededOutlaws protocol supports encrypted messaging and game sync in niche multiplayer environments.