List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
x-bone-ctl26512.2Network servicesBuilt-inAs neededX-Bone control protocol manages policy enforcement and node telemetry in virtual infrastructures.
sst26612.2Data transferBuilt-inAs neededSST (Secure Session Tunneling) provides encrypted session establishment in distributed apps.
td-service26712.2Application serversBuilt-inAs neededTD-Service protocol handles secure time distribution for timestamping or audit systems.
td-replica26812.2Application serversBuilt-inAs neededTD-Replica is used for replicating time-series databases across distributed secure nodes.
manet26912.2Network servicesBuilt-inAs neededMANET protocol supports dynamic mesh networking between mobile ad hoc network nodes.
gist27012.2Instant messengersBuilt-inAs neededGist protocol supports collaborative code sync and secure snippet sharing on GitHub.
pt-tls27112.2P2PBuilt-inAs neededPosture Transport Transport Layer Security, used in network access control (NAC) for secure endpoint validation.
http-mgmt28012.2Debugging and measurementBuilt-inAs neededHTTP-Mgmt is a control interface protocol using HTTP for managing embedded systems.
personal-link28112.2Web browsingBuilt-inAs neededPersonal Link (IANA official)
cableport-ax28212.2Network servicesBuilt-inAs neededA protocol for CablePort AX, supporting cable-based network communication.
rescap28312.2Network servicesBuilt-inAs neededResolution Capability protocol provides metadata for service or identity verification.
corerjd28412.2Network servicesBuilt-inAs neededA protocol for Core RJD, a core remote job distribution protocol.
fxp28612.2Network servicesBuilt-inAs neededA protocol for Fixed eXchange Protocol, used in telecommunications for call routing or signaling.
k-block28712.2Network servicesBuilt-inAs neededA protocol for K-Block, a key or block-level network security protocol.
novastorbakcup30812.2BackupBuilt-inAs neededNovaStorBackup protocol handles encrypted backup sessions between client and vault systems.
entrusttime30912.2Debugging and measurementBuilt-inAs neededEntrustTime is a secure timestamp authority protocol used in PKI and document validation.
bhmds31012.2Network servicesBuilt-inAs neededA protocol for BHMDS (Business Host Management Data Service), managing business host data.
asip-webadmin31112.2Web browsingBuilt-inAs neededApple System Integration Protocol Web Administration, used for managing Apple systems.
vslmp31212.2Network servicesBuilt-inAs neededVSLM Protocol supports variable subnet licensing and session state control.
magenta-logic31312.2Application serversBuilt-inAs neededMagenta-Logic protocol is used in secure workflow or logic programming systems.