Open Source DPI for Integrators
If we're doing our jobs right, people won't notice the network: the important Zoom business call will always work, the bad guys will be kept out, the ping time to the game server will never hiccup, and the streaming movie won't pixelate or (gasp!) pause. But the expanding role of applications in our daily lives and the pervasiveness of network-ready devices have increased our dependence on the network.
The days of cut-price and unpredictable networks are coming to an end. Today's network has to be smarter. Features can include:
- Quality of experience (QoE)
- Digital experience monitoring
- Application-based network policies
- Next-generation cybersecurity and firewall protection
- Network visibility
What Is Netify DPI?
The open source Netify Agent is small footprint engine that performs underlying deep packet inspection (DPI) and metadata extraction. The analyzed network data can be streamed to an open format which can be consumed by 3rd party applications, firewalls, QoS engines and more. In addition to the data stream, the Netify Agent provides a plugin architecture for high-speed data integrations.
With the power of Netify's inline network analysis, we can build a better network. The Netify Agent can be deployed on small embedded devices, as well as big iron backend network infrastructure. To give you same real world examples, the agent has been integrated into:
- SD-WAN solutions
- Routers and firewalls
- IoT gateways
- Mobile core networks
- Virtual network probes
- and other OEM devices
You can find product details below, and technical details here.
Netify DPI - Open Source Core
The core Netify DPI engine is open source widely deployed across a variety of Linux and xBSD systems. We also provide some premium add-ons - see further below for details.
Provides deep packet inspection and network analysis powered by our open source Netify DPI Agent.
Runs on big iron as well as embedded systems including the Raspberry Pi and OpenWRT devices.
Supports multi-core environments for processing packets a Gbps speeds on standard and cost effective x86 hardware.
Detects apps like Facebook, Twitter, YouTube, Netflix etc. by mapping DNS lookups, extracting SSL/TLS certificate domain names, SNI hostnames and more.
Detects detects over 200 protocols including BitTorrent, VPNs, Proxies, VoIP and many others. Unpacks DNS, DHCP, SSL, HTTP and other requests for deep analysis of the network.
Provides streaming flow metadata in an open format for integration with firewalls, QoS engines, cybersecurity solutions, performance engines, and more.
Netify DPI - Premium Add-Ons
Take DPI to the next level with local add-ons powered by cloud analysis and metadata.
Deep packet inspection is not a one-time implementation. New applications and protocols are constantly appearing and evolving. You can manage signatures and updates via our cloud-based management tool.
IP Sets Plugin
Provides direct hooks into the Netify DPI Engine for creating IP sets and firewall marks for tightly integrating firewall, QoS and routing policy engines.
Hybrid Stats Engine
Provides bandwidth and performance stats for the local DPI agent. This can be used for in-house data integration as well as our Hybrid Informatics engine.
Compare with Traditional DPI
Netify DPI can be integrated on devices, in containers, and in the cloud.
|Traditional DPI||Netify DPI|
|Inflexible||Dynamic and customizable|
|On-premise only||Optional cloud intelligence|
|Vendor-locked signatures||Open and custom signatures|
Optional Network Intelligence
The Netify DPI Agent provides a great starting point. As an optional add-on, we complement the on-premise DPI data with cloud-based network intelligence and visibility. Features include:
- Device Discovery
- Advanced Risk Analysis
- Bandwidth Monitoring
- Hostname Visibility
- Forensics and Archiving
- Cloud-based Application Detection
- AI-based Network Events
- Connection Tracking