Open-source DPI delivers comprehensive classification for standardized protocols, but falls short in detecting applications and service types
- Poor use of AI techniques such as machine learning and deep learning constricts open-source DPI’s ability to manage encrypted traffic
- Inadequate customer support cited by more than 70 % of vendors
- Custom migration tools play a significant role in driving vendors’ decision to switch from open-source to commercial DPI
Despite extensive use of advanced statistical, behavioral and heuristic analyses, open-source DPI continues to be challenged by the relentless growth in applications. “Multiple software versions and frequent release updates coupled with constantly changing delivery pathways, for example the use of CDN and multi-cloud architectures, impact application classification in terms of accuracy and reliability,“ said Ariana Leena Lavanya, Principle Analyst at The Fast Mode. “This affects application-based policies, leading to vendors reverting to generic rules that tend to compromise application performance, and network security and efficiency.”
Poor adoption of AI-based techniques leads to constrained visibility into encrypted flows
Based on a survey of 48 leading networking and cybersecurity vendors conducted early this year, the report shows poor use of AI-based techniques such as machine learning (ML) and deep learning (DL) in open-source DPI, with less than a third (31 %) of vendors citing their usage. “The adoption of AI has become increasingly critical in the face of tougher encryption protocols, such as TLS 1.3, DoX, ESNI and ECH, which progressively erode traffic data that is available to traditional DPI tools,“ said Dr. Martin Mieth, VP Engineer at ipoque. “To address and reverse these visibility gaps, our commercial DPI technology for networking and cybersecurity solution providers comes with encrypted traffic intelligence (ETI) which combines advanced ML and DL techniques to accurately and reliably classify traffic flows, despite encryption, obfuscation or anonymization.“
Higher traffic volumes and the need for comprehensive signature libraries drive shift to commercial DPI
With zero licensing fees, open-source DPI provides an attractive option for delivering baseline insights across common networking and security use cases. However, evolving business requirements are pushing vendors to explore strategic alternatives, specifically commercial DPI solutions which are built to address higher performance, capacity and customer service requirements. According to the report, 71.3 % of vendors rate the service and customer care provided by open-source DPI to be limited or non-existent. The report also finds traffic volumes, signature libraries and application complexities (e.g. niche protocols for IIoT and real-time communications) positively influencing vendors‘ decision to switch to commercial DPI.
Migration tools expected to significantly reduce transitioning complexities
According to the survey, 82.2 % of vendors agree that having a migration tool can positively affect their decision to upgrade from open-source to a commercial DPI software solution. Migration tools can cut down integration complexities, by allowing existing configurations such as custom signatures, databases and files to be exported to the new DPI software. By replicating past algorithms, rules and processing thresholds, vendors can speed up deployment and minimize service disruptions.
Exploring new alternatives with ipoque’s cutting-edge, next-gen DPI technology
ipoque’s high-performance OEM DPI engines, which include R&S®PACE 2 and its VPP-based counterpart R&S®vPACE, are enhanced with ETI (encrypted traffic intelligence) to deliver accurate classification across any protocol, application and service type, even for encrypted traffic. Boasting the industry’s lowest memory footprint and a comprehensive, weekly-updated library with thousands of signatures, ipoque offers a highly-scalable and reliable alternative to open-source DPI. ipoque’s DPI technology is backed by extensive R&D and a stringent QA methodology including the mobile automation framework which involves constant performance and reliability testing across the globe for the highest detection rates across any traffic, including high-priority mobile applications.
Conducted jointly with The Fast Mode, a leading telecoms/IT publication, the survey also uncovers the benefits, long-term costs and security implications of open-source DPI, as well as ongoing migrations to commercial DPI. The report is available for download at: www.ipoque.com/open-source-dpi.
ipoque
ipoque, a Rohde & Schwarz company, is a global leader in network analytics and deep packet inspection software for the communications industry. We leverage our deep domain expertise to create software solutions that empower customers to transform network data into intelligence. Find out more at www.ipoque.com.
Rohde & Schwarz
Rohde & Schwarz is striving for a safer and connected world with its Test & Measurement, Technology Systems and Networks & Cybersecurity Divisions. For 90 years, the global technology group has pushed technical boundaries with developments in cutting-edge technologies. The company's leading-edge products and solutions empower industrial, regulatory and government customers to attain technological and digital sovereignty. The privately owned, Munich-based company can act independently, long-term and sustainably. Rohde & Schwarz generated net revenue of EUR 2.78 billion in the 2022/2023 fiscal year (July to June). On June 30, 2023, Rohde & Schwarz had around 13,800 employees worldwide.
