List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| systat | 11 | 12.2 | Debugging and measurement | Built-in | As needed | Systat protocol provides legacy system statistics like uptime and load averages. |
| daytime | 13 | 12.2 | Debugging and measurement | Built-in | As needed | Daytime is a diagnostic time protocol returning current server time in plaintext (legacy). |
| qotd | 17 | 12.2 | Debugging and measurement | Built-in | As needed | QOTD (Quote of the Day) is a legacy protocol returning a quote string for diagnostics. |
| msp | 18 | 12.2 | Remote control | Built-in | As needed | Managed service provider system. |
| chargen | 19 | 12.2 | Debugging and measurement | Built-in | As needed | Chargen (Character Generator) protocol sends a continuous stream of characters, used for testing. |
| ftp-data | 20 | 12.2 | Data transfer | Built-in | As needed | FTP-DATA carries the actual file contents in an FTP transfer session, often over port 20. |
| ftp | 21 | 12.2 | Data transfer | Built-in | As needed | FTP (File Transfer Protocol) is a legacy file transfer protocol with optional TLS/SSL encryption. |
| ssh | 22 | 12.2 | Remote control | Built-in | As needed | Secure Shell protocol for encrypted remote access. |
| telnet | 23 | 12.2 | Remote control | Built-in | As needed | Standard remote terminal access protocol. |
| smtp | 25 | 12.2 | Built-in | As needed | SMTP (Simple Mail Transfer Protocol) handles outbound mail delivery with optional TLS. | |
| nsw-fe | 27 | 12.2 | Debugging and measurement | Built-in | As needed | NSW-FE protocol provides secure access to front-end services in Novell's legacy workstation tools. |
| msg-icp | 29 | 12.2 | Debugging and measurement | Built-in | As needed | Msg-ICP is a messaging control protocol used in internal content distribution systems. |
| msg-auth | 31 | 12.2 | Debugging and measurement | Built-in | As needed | Msg-Auth manages secure authentication and session binding in messaging platforms. |
| dsp | 33 | 12.2 | Debugging and measurement | Built-in | As needed | DSP (Domain Specific Protocol) refers to a custom application protocol with a narrow scope of encrypted data exchange. |
| time | 37 | 12.2 | Debugging and measurement | Built-in | As needed | Time protocol returns current system time as a 32-bit value, used in early time sync implementations. |
| rap | 38 | 12.2 | Network services | Built-in | As needed | Routing Access Protocol enables dynamic service advertisement and queries. |
| rlp | 39 | 12.2 | Network services | Built-in | As needed | Reliable Link Protocol manages robust link-layer transmission in wireless networks. |
| graphics | 41 | 12.2 | Debugging and measurement | Built-in | As needed | Graphics protocol delivers remote graphical output for thin clients or display managers. |
| nameserver | 42 | 12.2 | Network services | Built-in | As needed | Provides hostname-to-address mapping in early distributed systems. |
| nicname | 43 | 12.2 | Network services | Built-in | As needed | Legacy protocol used for domain whois queries and registry lookups. |
Was this information helpful?
