Документация VAS Experts - en:dpi:dpi_components:platform

Improving Fault Tolerance - Bypass Mode Network Cards

Anonymous (anonymous@undisclosed.example.com) — 2025-06-26T07:05:25+00:00

Improving Fault Tolerance - Bypass Mode Network Cards Why do you recommend purchasing SILICOM cards? The reasons are as follows: * The cards have bypass functionality. * The delivery package can include licenses for the required drivers for maximum performance - DPDK & Libzero. These cards are marked with -SQ1 (example for a 10GbE card).

Administration

Anonymous (anonymous@undisclosed.example.com) — 2026-06-15T14:13:32+00:00

Administration * General description * Database Administration: UDR and SDR * Changelog of SSG BETA-version * Modifying the configuration and its integrity check * Memory Issue Resolution * Flow statistics output * Changing configuration parameters * Tracking buffer reset * TCP and UDP Protocol Blocking Configuration

DPDK Interfaces Configuration

Anonymous (anonymous@undisclosed.example.com) — 2026-06-03T11:33:30+00:00

DPDK Interfaces Configuration DPDK (Data Plane Development Kit) allows working with network cards directly without actually using the Linux kernel. This improves the performance of the solution. DPDK supports many more models of network cards than pf_ring, and a much richer interface. So it allows you to implement various working schemes, suitable for 10G, 25G, 40G, 100G traffic, etc.

Operation peculiarities for different connection modes

Anonymous (anonymous@undisclosed.example.com) — 2026-06-16T13:22:27+00:00

Operation peculiarities for different connection modes * General description * Asymmetric connection * Mirrored traffic operation * Bypass Work at the aggregated channels Etherchannel/LAG/LACP * Operation in PPPoE/PPTP/L2TP/IPIP/GRE (including ERSPAN) tunnels * Working with Tagged Traffic MPLS/QinQ * Configuring on-stick and LAG/LACP * LLDP support

IPv6 support

Anonymous (anonymous@undisclosed.example.com) — 2024-09-26T15:29:42+00:00

IPv6 support IPv6 support is activated by setting ipv6=1 in dpi config file Subscriber Management is optimized for IPv6 fixed size subnets. The size of the IPV6 subnet prefix (issued to the subscriber by default /64) can be changed by setting ipv6_subnetwork=64

Mobile Networks Support

Anonymous (anonymous@undisclosed.example.com) — 2025-04-29T07:37:53+00:00

Mobile Networks Support Stingray SG can detect GTP-C traffic and extract subscriber parameters for the subscriber's IP and login binding from the GTP session creation requests. GTP-C versions 1 and 2 are supported. GTP support is enabled by parameters in fastdpi.conf:

VLAN Translation

Anonymous (anonymous@undisclosed.example.com) — 2024-09-26T15:29:42+00:00

VLAN Translation In version 9.4, the ability to translate VLAN has been added: the incoming VLAN of the packet is replaced with the specified outgoing VLAN. VLAN translation is specified in /etc/dpi/vlan_translation.txt text file, which has the following structure:

PCAP Recording Management and VLAN Mirroring

Anonymous (anonymous@undisclosed.example.com) — 2026-07-07T13:58:12+00:00

services service_12 pcap_recording service_17 vlan_mirroring PCAP Recording Management and VLAN Mirroring PCAP recording management 12 Service enables PCAP recording for all subscriber traffic. PCAP files are stored in the directory specified by the ajb_udpi_path parameter in the fastdpi.conf file: ajb_udpi_path

Configuring logging of HTTP, SSL/TLS, and SIP metadata

Anonymous (anonymous@undisclosed.example.com) — 2026-07-07T13:28:10+00:00

Configuring logging of HTTP, SSL/TLS, and SIP metadata The system allows to record the traffic for selected protocols in PCAP format. It can save also metadata of HTTP requests, SSL/TLS, SIP in log files. HTTP To record HTTP requests' metadata: please use the following parameters in configuration file

Traffic mirroring

Anonymous (anonymous@undisclosed.example.com) — 2026-07-08T14:00:30+00:00

Traffic mirroring

FastDPI monitoring and logs

Anonymous (anonymous@undisclosed.example.com) — 2025-03-06T09:06:43+00:00

FastDPI monitoring and logs * SNMP Monitoring via snmpd Service * Monitoring via SNMP agent (Zabbix-agent) * Monitoring traffic distribution by class * Log Management with rsyslog System logs are presented as text files that are located in the /var/log/dpi directory for DPI and PCRF modules. Types of messages in the log: * [CRITICAL] - critical error, system operation is impossible without troubleshooting

Subscriber management

Anonymous (anonymous@undisclosed.example.com) — 2026-06-29T09:49:01+00:00

Subscriber management * DPI management configuration. Integration using the PUSH method * Service management. Named service profiles * Traffic policing management. Named policing profiles * Information on command result * IP-login binding (bind, bind_multi) * Output of control commands using the JSON format * fdpi_ctrl commands

VLAN Traffic Handling

Anonymous (anonymous@undisclosed.example.com) — 2026-06-03T13:19:30+00:00

VLAN Traffic Handling vlan groupvlan dropvlan passvlan hidevlan permitvlan group * Drop traffic without analysis from a specific VLAN: fdpi_cli vlan rule add perm drop * Drop traffic with preliminary analysis but without passing it to Netflow statistics from a specific VLAN (Used for asymmetric traffic when a copy of traffic from another site is fed to the site. It is necessary to analyze and drop the traffic so that it does not end up in statistics):