List of protocols
- Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all. - Cloud protocols created by VAS Experts — are periodically updated from the VAS Cloud. This ensures that popular applications remain up-to-date as their behavior changes. Description
- Custom (user-defined) protocols — protocols created by users via the GUI using VAS Cloud tools. These have higher priority than those loaded from the VAS Cloud, and within them, IP:PORT takes precedence over IP and CIDR. It is possible to add a protocol based on IP, SNI, or AS. Guide.
- DSL protocols — protocols described in the DSL language and connected to DPI as a separate module, without reinstalling the software or causing traffic interruption. Unlike custom protocols, a DSL protocol is a finite state machine that analyzes the first N packets of a flow against defined conditions (ports, AS numbers, payload bytes, DSL expressions) and determines whether the flow matches the protocol.
DSL protocols are created by VAS Experts specialists upon client request to Technical Support.
| Protocol | ID | DPI version | Protocol group | Protocol type | Update | Description |
|---|---|---|---|---|---|---|
| IDPR-CMTP | 65062 | 12.2 | Unknown | Built-in | As needed | idpr-cmtp operates on port 65062 and supports control messaging for Inter-Domain Policy Routing extensions. |
| TP++ | 65063 | 12.2 | Unknown | Built-in | As needed | tp++ operates on port 65063 and supports communication in advanced transaction processing systems, enabling high-performance data exchange in distributed environments. |
| IL | 65064 | 12.2 | Unknown | Built-in | As needed | il operates on port 65064 and refers to the IL protocol developed at Bell Labs for communication in Plan 9 operating systems. |
| IPv6-Encap | 65065 | 12.2 | Unknown | Built-in | As needed | ipv6-encap operates on port 65065 and supports encapsulation of packets using IPv6 tunneling techniques for interoperability across networks. |
| SDRP | 65066 | 12.2 | Unknown | Built-in | As needed | sdrp operates on port 65066 and facilitates Source Demand Routing Protocol for source-initiated routing. |
| IPv6-Route | 65067 | 12.2 | Unknown | Built-in | As needed | ipv6-route operates on port 65067 and is associated with IPv6 routing headers used to direct packets through intermediate nodes. |
| IPv6-Frag | 65068 | 12.2 | Unknown | Built-in | As needed | ipv6-frag operates on port 65068 and handles IPv6 fragment header processing for packet reassembly. |
| IDRP | 65069 | 12.2 | Unknown | Built-in | As needed | idrp operates on port 65069 and supports routing protocol functionality in Inter-Domain Routing Protocol environments. |
| RSVP | 65070 | 12.2 | Unknown | Built-in | As needed | rsvp-e2e-ignore and rsvp operate on ports 65070–65158 and provide signaling for reservation of resources in IP networks using the Resource Reservation Protocol. |
| DSR | 65072 | 12.2 | Unknown | Built-in | As needed | dsr operates on port 65072 and enables dynamic source routing protocol communication in ad hoc networks. |
| BNA | 65073 | 12.2 | Unknown | Built-in | As needed | Brocade Network Advisor protocol used in SAN or LAN fabric management. |
| ESP | 65074 | 12.2 | Unknown | Built-in | As needed | esp operates on port 65074 and supports Encapsulating Security Payload for secure IP packet encryption. |
| AH | 65075 | 12.2 | Unknown | Built-in | As needed | Authentication Header (AH) protocol used in IPsec for packet-level integrity and authentication. |
| I-NLSP | 65076 | 12.2 | Unknown | Built-in | As needed | i-nlsp operates on port 65076 and refers to extended NLSP (NetWare Link Services Protocol) in internetworking environments. |
| SWIPE | 65077 | 12.2 | Unknown | Built-in | As needed | swipe operates on port 65077 and supports IP-layer encryption and authentication via the Simple Web IP Security Protocol (SWIPE). |
| NARP | 65078 | 12.2 | Unknown | Built-in | As needed | narp operates on port 65078 and supports Next-Hop Address Resolution Protocol in non-broadcast multi-access networks. |
| MOBILE | 65079 | 12.2 | Unknown | Built-in | As needed | mobile operates on port 65079 and refers to generic or internal protocol used for mobile connectivity or synchronization. |
| TLSP | 65080 | 12.2 | Unknown | Built-in | As needed | tlsp operates on port 65080 and refers to a transport layer security protocol with limited public documentation, used in secure network systems. |
| SKIP | 65081 | 12.2 | Unknown | Built-in | As needed | skip operates on port 65081 and supports Simple Key Management for Internet Protocol (SKIP) for IPsec key exchange. |
| IPv6-ICMP | 65082 | 12.2 | Network services | Built-in | As needed | A protocol for IPv6 ICMP (Internet Control Message Protocol), managing IPv6 control. |
Was this information helpful?
