List of protocols

  1. Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
    If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.
  2. Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
  3. Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
  4. DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
    DSL protocols are created by VAS Experts specialists upon client request to Technical Support.

ProtocolIDDPI versionProtocol groupProtocol typeUpdateDescription
dhcp-failover64712.2Network servicesBuilt-inAs neededA protocol for DHCP Failover, providing backup for IP address management.
rrp64812.2Network servicesBuilt-inAs neededRedundant Routing Protocol provides backup routes and failover telemetry in networks.
cadview-3d64912.2Video, picturesBuilt-inAs neededCADView-3D protocol is used to stream 3D CAD content securely to web or enterprise viewers.
obex65012.2Web browsingBuilt-inAs neededObject Exchange Protocol, used for transferring binary objects between devices, not a web browser.
ieee-mms65112.2Network servicesBuilt-inAs neededA protocol for IEEE MMS (Manufacturing Message Specification), messaging in manufacturing.
hello-port65212.2Network servicesBuilt-inAs neededA protocol for a hello port, used in network testing or device identification.
repscmd65312.2Network servicesBuilt-inAs neededREPSCMD protocol issues sync commands in replica sets or distributed backup systems.
aodv65412.2Network servicesBuilt-inAs neededA protocol for AODV (Ad Hoc On-Demand Distance Vector), routing in ad hoc networks.
tinc65512.2Tunneling, secure, ssl, pkiBuilt-inAs neededTinc is an open-source VPN daemon that uses tunneling and encryption to create secure private networks over the internet.
spmp65612.2Network servicesBuilt-inAs neededSecure Policy Management Protocol distributes policies to end-user or device agents.
rmc65712.2Network servicesBuilt-inAs neededRemote Management Control protocol handles remote admin telemetry and commands.
tenfold65812.2Network servicesBuilt-inAs neededTransmits metadata and synchronization states across Tenfold CRM integrations.
mac-srvr-admin66012.2Application serversBuilt-inAs neededMac-Srvr-Admin supports secure remote configuration of Apple macOS servers.
hap66112.2Network servicesBuilt-inAs neededA protocol for Host Access Protocol, enabling remote host interaction over networks.
pftp66212.2Data transferBuilt-inAs neededPFTP (Private FTP) is an encrypted FTP variant used in secure enterprise data exchange.
purenoise66312.2Network servicesBuilt-inAs neededTraffic obfuscation protocol that injects synthetic data into networks for testing or masking.
asf-secure-rmcp66412.2Application serversBuilt-inAs neededASF-Secure-RMCP adds security to IPMI's remote management control protocol.
oob-ws-https66412.2Web browsingBuilt-inAs neededOut-of-Band Web Services over HTTPS, used for remote management.
sun-dr66512.2Network servicesBuilt-inAs neededSun Dynamic Reconfiguration protocol handles hardware hot-swap sync and alerts.
doom66612.2GamingBuilt-inAs neededDOOM multiplayer protocols support secure peer-to-peer session sync and state replication.