List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| SSTP | 49296 | 13.1 | VPN | Built-in | 2024-07-09 | A VPN protocol developed by Microsoft that uses SSL/TLS encryption for secure connections. |
| port_scan | 54362 | 12.2 | Botnet | Cloud | 2024-06-10 | Port_Scan refers to scanning protocols/tools used to identify active network services and vulnerabilities. |
| tor | 54327 | 12.2 | VPN | Cloud | 2024-06-09 | A privacy-focused service that anonymizes internet traffic by routing it through multiple volunteer nodes. |
| botnet22 | 54361 | 12.2 | Botnet | Cloud | 2024-06-07 | Botnet22 is a known botnet signature associated with encrypted C2 communication in malware networks. |
| binance | 54360 | 12.2 | Transactions, banking, trading | Cloud | 2024-05-25 | Binance protocol supports API-based trading and account management on the Binance cryptocurrency exchange. |
| beeline_tv | 54283 | 12.2 | Video, pictures | Cloud | 2024-05-16 | Beeline TV is a Russian IPTV/OTT service with encrypted content streaming protocols for video delivery. |
| xbox | 3074 | 12.2 | Gaming | Built-in | 2024-04-17 | Xbox protocol manages secure login, party chat, and game session sync via Xbox Live. |
| yandex_disk | 54312 | 12.2 | File sharing | Cloud | 2024-02-23 | Yandex Disk uses encrypted WebDAV and HTTPS to support cloud file sync and sharing. |
| Signal | 2974 | 11.1 | Instant messengers | Built-in | 2024-02-14 | Signal uses the Signal Protocol for end-to-end encrypted voice, video, and messaging. |
| signal_cl | 54412 | 12.2 | Instant messengers | Cloud | 2024-02-14 | Signal_CL refers to Signal’s client-side protocol for secure identity and session sync. |
| Skype | 49216 | 12.2 | Instant messengers | Built-in | 2024-02-12 | Protocol for Skype is an application for messaging, voice and video calls over the internet. |
| FACEBOOK_VIDEO | 49242 | 12.2 | Video, pictures | Built-in | 2024-02-12 | Facebook Video uses secure CDN-backed delivery over QUIC and HTTPS for embedded and live video streaming. |
| FACEBOOK_TRACK | 49241 | 12.2 | Social networks | Built-in | 2024-02-12 | refers to tracking tools or data collection within Facebook’s ecosystem, often used for advertising. |
| FACEBOOK_APPS | 49243 | 12.2 | Social networks | Built-in | 2024-02-12 | Refers to the various apps and services owned by Facebook, including Instagram, WhatsApp, and Messenger. |
| Bittorrent | 49165 | 12.2 | P2P | Built-in | 2024-02-12 | A widely used P2P protocol for decentralized file sharing and torrent downloads. |
| OPENVPN_UDP | 49237 | 12.2 | VPN | Built-in | 2024-01-17 | An OpenVPN variant that uses UDP for faster, less-latent connections. |
| google_ggc | 54352 | 12.2 | CDN & Cloud services | Cloud | 2024-01-06 | Google GGC is Google's Global Cache protocol for local encrypted content delivery. |
| protonmail | 54315 | 12.2 | Cloud | 2023-12-06 | ProtonMail uses secure IMAP/SMTP protocols with end-to-end encryption and zero-access architecture. | |
| telegram_cl | 54401 | 12.2 | Instant messengers | Cloud | 2023-12-05 | Telegram_CL manages encrypted session control and cloud history sync on Telegram clients. |
| ZOOM | 49262 | 11.1 | Video conference platforms | Built-in | 2023-11-22 | A video conferencing platform widely used for virtual meetings, webinars, online classes, and team collaboration. |
Was this information helpful?
