Документация VAS Experts en:dpi:dpi_options
https://wiki.vasexperts.ru/
2026-04-08T06:54:49+00:00Документация VAS Experts
https://wiki.vasexperts.ru/
https://wiki.vasexperts.ru/lib/exe/fetch.php?media=wiki:favicon.icotext/html2025-09-22T12:57:36+00:00Anonymous (anonymous@undisclosed.example.com)DNS Query Processing and DNS Response Spoofing
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:dns_substitution&rev=1758545856&do=diff
services service_19 dns_spoofing
DNS Query Processing and DNS Response Spoofing
Purpose
The DNS response spoofing service allows modifying IP addresses returned by the DNS server for specific domain names. This enables influencing DNS server responses by redefining IP addresses in server responses for certain types oftext/html2025-09-19T10:34:38+00:00Anonymous (anonymous@undisclosed.example.com)Traffic Mirroring to External Platforms
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:dpi_divert_spec&rev=1758278078&do=diff
services service_14 pcap_recording
Traffic Mirroring to External Platforms
A part of the traffic can be mirror from the common channel and transmitted for analysis and processing to external platforms.
TAP Interfaces Configuration
* TAP0 - is used for traffic diversion
* TAP1 - server side port that receives traffictext/html2025-01-16T12:33:53+00:00Anonymous (anonymous@undisclosed.example.com)Ads blocking and replacement
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_advertising&rev=1737030833&do=diff
Ads blocking and replacement
* General description
* Configuration
* Managementtext/html2025-01-16T12:33:34+00:00Anonymous (anonymous@undisclosed.example.com)Subcribers channel policing for IPv4 and IPV6
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_bandwidth_mgmt&rev=1737030814&do=diff
Subcribers channel policing for IPv4 and IPV6
* General description
* Configuration
* JSON Supporttext/html2025-01-16T12:35:13+00:00Anonymous (anonymous@undisclosed.example.com)Caching (requires version 2.0 or above)
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_cache&rev=1737030913&do=diff
Caching (requires version 2.0 or above)
* General description
* Configuration
* Management
* Troubleshooting
:!: Dear Clients! We apologize: video caching from youtube sites is not available since the method of dynamic files naming has been changed. As a result, the caching efficiency is significantly reduced. The problem is being addressed. For a temporary solution we propose you to disable caching for the vk and youtube sites in the /etc/dpi/fastdpi.conf dpi configuration file by s…text/html2025-01-16T12:34:16+00:00Anonymous (anonymous@undisclosed.example.com)Allow list and Captive Portal
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_capture&rev=1737030856&do=diff
Allow list and Captive Portal
* General description
* Preparing white list
* Configuration
* Management
* Policing for Captive Portaltext/html2025-01-16T12:34:06+00:00Anonymous (anonymous@undisclosed.example.com)Bonus program for subscribers (additional contract required)
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_cosmobonus&rev=1737030846&do=diff
Bonus program for subscribers (additional contract required)
* General description
* Configuration
* Managementtext/html2026-02-17T14:15:05+00:00Anonymous (anonymous@undisclosed.example.com)Protection against DDoS attacks and botnet detection
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_ddos&rev=1771337705&do=diff
Protection against DDoS attacks and botnet detection
* Description of Tools and Architecture
* DDoS Protection Configuration Using SSG DPI
* Configuring DDoS and BotNet Detector Based on QoE
* Service of subscriber protectiontext/html2025-10-14T13:01:11+00:00Anonymous (anonymous@undisclosed.example.com)Filtering by a list of restricted sites
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_filtration&rev=1760446871&do=diff
Filtering by a list of restricted sites
* General description
* Configuration
* Management
* Preparing dictionaries that list resources to block
* Diagnostics
* Making a signed EDS request
* Federal Supervision Agency for Information Technologies and Communications queries and replies
* Script to block subnets
* Script for monitoring reports of the Revisor blocked sites control systemtext/html2025-01-16T12:34:53+00:00Anonymous (anonymous@undisclosed.example.com)Mini Firewall
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_firewall&rev=1737030893&do=diff
services service_13 mini_firewall
Mini Firewall
The service is designed to to improve security against unauthorized access in case of subscribers having public IPv4 and IPv6 addresses.
All incoming requests for ports below the specified threshold are closed to the subscriber’s address (usually the threshold equals to 1024 - i.e. all system ports will be closed),
but some ports could be left opened, for example, to access a home NAS.
In addition, some malicious activity coming from the subsc…text/html2025-01-16T12:33:09+00:00Anonymous (anonymous@undisclosed.example.com)Lawful interception. PCAP, IPFIX Export (Clickstream, DNS, SIP metadata, FTP)
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_li&rev=1737030789&do=diff
Lawful interception. PCAP, IPFIX Export (Clickstream, DNS, SIP metadata, FTP)
* General description
* Configuring local record PCAP, HTTP, SSL/TLS, SIP
* Configuring Clickstream, Meta data, DNS export in IPFIX
* PCAP Recording Management and VLAN Mirroringtext/html2025-01-16T12:34:27+00:00Anonymous (anonymous@undisclosed.example.com)Subscriber notifications
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_notify&rev=1737030867&do=diff
Subscriber notifications
* General description
* Configuration
* Managementtext/html2025-01-16T12:32:08+00:00Anonymous (anonymous@undisclosed.example.com)Traffic prioritization depending on protocols and directions
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_priority&rev=1737030728&do=diff
Traffic prioritization depending on protocols and directions
* General description
* Configuration
* Assigning priorities according to the protocols
* Priority assignment depending on the directions
* The correspondence between DSCP, priority, and classtext/html2025-01-16T12:32:39+00:00Anonymous (anonymous@undisclosed.example.com)Common and Virtual Channels Policing
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_shaping&rev=1737030759&do=diff
Common and Virtual Channels Policing
* General description of policing
* Policing of the Common Channel
* Policing of Virtual Channel (vChannel)
* Policing by session and overriding traffic classestext/html2025-01-16T12:31:57+00:00Anonymous (anonymous@undisclosed.example.com)Statistics gathering and analysis on protocols and directions
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:opt_statistics&rev=1737030717&do=diff
Statistics gathering and analysis on protocols and directions
* General Description
* Set up NetFlow export by protocols, directions and billing
* Configuring Full NetFlow Export in IPFIX Format
* Configuring autonomous systems
* List of protocols and identifierstext/html2025-11-21T10:31:54+00:00Anonymous (anonymous@undisclosed.example.com)List of protocols
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:protocols&rev=1763721114&do=diff
List of protocols
* Built-in protocols — updated along with the SSG software version. Installing a new version requires a DPI reboot, which causes traffic interruption.
If needed, they can be supplemented with up-to-date attributes from the VAS Cloud. This is only necessary for complex protocols, but the option is available for all.text/html2026-02-14T15:38:06+00:00Anonymous (anonymous@undisclosed.example.com)Use Cases
https://wiki.vasexperts.ru/doku.php?id=en:dpi:dpi_options:use_cases&rev=1771083486&do=diff
Use Cases
* Optimizing uplink channel
* Simple DDoS analysis
* Quick Start: Tariff Plan and Captive Portal
* Subscriber athorization in WiFi network by a phone number
* Categorized lists
* Configuring GUI, SSG, and WiFi HotSpot with Session Management Enabled
* Using DPI for optimizing large data transfers