Документация VAS Experts en:dpi:dpi_components:platform

Improving Fault Tolerance - Bypass Mode Network Cards

Anonymous (anonymous@undisclosed.example.com) — 2025-06-26T07:05:25+00:00

Improving Fault Tolerance - Bypass Mode Network Cards Why do you recommend purchasing SILICOM cards? The reasons are as follows: * The cards have bypass functionality. * The delivery package can include licenses for the required drivers for maximum performance - DPDK & Libzero. These cards are marked with -SQ1 (example for a 10GbE card).

Administration

Anonymous (anonymous@undisclosed.example.com) — 2024-09-26T15:29:42+00:00

Administration * General description * Database Administration: UDR and SDR * Changelog of SSG BETA-version * Modifying the configuration and its integrity check * Memory Issue Resolution

Billing integration (PUSH method)

Anonymous (anonymous@undisclosed.example.com) — 2024-09-26T15:29:42+00:00

Billing integration (PUSH method) An integration of DPI platform with a billing system is arranged by PUSH model. It means that the billing (or an additional system) has to inform DPI by itself about available services for each subscriber and policing configuration. This information is transferred by

DPDK Interfaces Configuration

Anonymous (anonymous@undisclosed.example.com) — 2026-03-02T14:28:05+00:00

DPDK Interfaces Configuration DPDK (Data Plane Development Kit) allows working with network cards directly without actually using the Linux kernel. This improves the performance of the solution. DPDK supports many more models of network cards than pf_ring, and a much richer interface. So it allows you to implement various working schemes, suitable for 10G, 25G, 40G, 100G traffic, etc.

Operation peculiarities for different connection modes

Anonymous (anonymous@undisclosed.example.com) — 2024-09-26T15:29:42+00:00

Operation peculiarities for different connection modes * General description * Asymmetric connection * Mirrored traffic operation * Bypass Work at the aggregated channels Etherchannel/LAG/LACP * Work within the GRE/PPTP/L2TP/IPIP tunnels * Working with Tagged Traffic MPLS/QinQ * Configuring on-stick and LAG/LACP

IPv6 support

Anonymous (anonymous@undisclosed.example.com) — 2024-09-26T15:29:42+00:00

IPv6 support IPv6 support is activated by setting ipv6=1 in dpi config file Subscriber Management is optimized for IPv6 fixed size subnets. The size of the IPV6 subnet prefix (issued to the subscriber by default /64) can be changed by setting ipv6_subnetwork=64

Mobile Networks Support

Anonymous (anonymous@undisclosed.example.com) — 2025-04-29T07:37:53+00:00

Mobile Networks Support Stingray SG can detect GTP-C traffic and extract subscriber parameters for the subscriber's IP and login binding from the GTP session creation requests. GTP-C versions 1 and 2 are supported. GTP support is enabled by parameters in fastdpi.conf:

Active/Backup reservation (VRRP)

Anonymous (anonymous@undisclosed.example.com) — 2025-04-29T07:38:22+00:00

Active/Backup reservation (VRRP) VRRP support is implemented in SSG using the Linux daemon keepalived. It configures scripts for calling CLI commands to put SSG in master or backup mode. In master mode, all SSG functionality is available. In backup mode, SSG works only as a bridge in_dev

VLAN Translation

Anonymous (anonymous@undisclosed.example.com) — 2024-09-26T15:29:42+00:00

VLAN Translation In version 9.4, the ability to translate VLAN has been added: the incoming VLAN of the packet is replaced with the specified outgoing VLAN. VLAN translation is specified in /etc/dpi/vlan_translation.txt text file, which has the following structure:

FastDPI monitoring and logs

Anonymous (anonymous@undisclosed.example.com) — 2025-03-06T09:06:43+00:00

FastDPI monitoring and logs * SNMP Monitoring via snmpd Service * Monitoring via SNMP agent (Zabbix-agent) * Monitoring traffic distribution by class * Log Management with rsyslog System logs are presented as text files that are located in the /var/log/dpi directory for DPI and PCRF modules. Types of messages in the log: * [CRITICAL] - critical error, system operation is impossible without troubleshooting

Subscriber management

Anonymous (anonymous@undisclosed.example.com) — 2024-09-26T15:29:43+00:00

Subscriber management * General description * Configuring the platform * Service Management * Policing Management * Named profiles * Information on command result * Tracking buffer reset * Support for subscribers with a single IPv4 address and an IPv6 subnet binding or with dynamically assigned IP addresses * Support for subscribers with multiple IP * Changing configuration parameters * Remote control * Output of control commands using the JSON format * fdpi_ctrl com…

Handling traffic by VLAN

Anonymous (anonymous@undisclosed.example.com) — 2025-11-20T11:54:34+00:00

Handling traffic by VLAN vlan groupvlan dropvlan passvlan hidevlan permitvlan group * Drop traffic without analysis from a specific VLAN: fdpi_cli vlan rule add perm drop * Drop traffic after preliminary analysis, but without sending it to NetFlow statistics from a specific VLAN (used for working with asymmetric traffic, when duplicated traffic from another site is delivered to the site. It is necessary to analyze and drop the traffic so that it does not get into statistics):