https://wiki.vasexperts.ru/ 2026-04-05T13:09:48+00:00 https://wiki.vasexperts.ru/ https://wiki.vasexperts.ru/lib/exe/fetch.php?media=wiki:favicon.ico text/html 2024-09-26T15:29:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_components:platform:dpi_inst_spec:dpi_inst_spec_asym&rev=1727364582&do=diff Asymmetric connection Asymmetric connection is arranged by using PBR mode on a router or creation of asymmetric route. The outbound traffic is only sent to the platform in this case. This arrangement allows to reduce the traffic to be processed by 10 times in some cases. This allows to simplify requirements to the platform. text/html 2025-05-23T14:03:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_components:platform:dpi_inst_spec:dpi_inst_spec_common&rev=1748008981&do=diff General description The full functionality of DPI is available in case of inline connection into the line before NAT servers and symmetric traffic. The latest requirement means that the inbound and outbound traffic of each subscriber goes through the same text/html 2025-05-23T14:02:38+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_components:platform:dpi_inst_spec:dpi_inst_spec_mirror&rev=1748008958&do=diff Mirrored traffic operation Also, this mode can be used to collect Netflow analytics, IPFIX (Clickstream and SIP), to filter by blacklist and to notify subscribers via WEB. Since in this mode DPI competes with the original site in response speed and cannot suppress the original request during filtering, there may be omissions in filtering due to packet loss in the line while delivering to the subscriber. To reduce this probability use the setting text/html 2024-09-26T15:29:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_components:platform:dpi_inst_spec:dpi_lag&rev=1727364582&do=diff Bypass Work at the aggregated channels Etherchannel/LAG/LACP Switching to bypass and back occurs link flapping. In that case, when all the links on one DPI platform some switches treate as lost of all connections and as a result LAG is rebuilded. It is recommended to set delay between switching for switch links one by one: text/html 2026-03-19T07:45:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_components:platform:dpi_inst_spec:dpi_onstick&rev=1773906334&do=diff Configuring on-stick and LAG/LACP Configuring on-stick On-stick — a new mode of the Stingray Service Gateway to save router ports [FastDPI 12+] On-stick allows you to save on physical hardware. FastDPI usually works with bridges, bridging two physical ports (devices). For an on-stick device the physical port is one, on which fastDPI itself creates virtual ports - on the subscriber side ( text/html 2024-12-24T13:56:01+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_components:platform:dpi_inst_spec:dpi_tagged&rev=1735048561&do=diff Working with Tagged Traffic MPLS/QinQ To support tagged MPLS or QinQ traffic, it is necessary to change the MTU. For QinQ, an MTU of 1508 is sufficient, while for MPLS, the MTU depends on the depth of the label stack. Additionally, some implementations of the ISIS protocol use more MTU than specified in the network equipment settings. text/html 2024-09-26T15:29:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_components:platform:dpi_inst_spec:dpi_tunnels&rev=1727364582&do=diff Work within the GRE/PPTP/L2TP/IPIP tunnels DPI In the Lawful Interception prefilter, tunnel parsing is enabled automatically by the presence of the tap_dev parameter. In other cases, you will need to explicitly enable parsing with the configuration parameter in the