Protocol & Application Classification Engine

ipoque’s Protocol and Application Classification Engine (PACE) is a software library using deep packet inspection (DPI) technologies – including pattern matching and behavioral, heuristic and statistical analysis in real-time – to reliably detect network protocols, even if they use advanced obfuscation and encryption techniques. It helps network equipment and security vendors enhance their products with powerful and proven Layer 7 protocol network management and application awareness capabilities. PACE consists of fully configurable DPI software that has been optimized for fast performance, efficient memory usage and classification reliability. The PACE solution accelerates time to market for vendors in a variety of use case scenarios including Network Security (IDS/IPS, firewalls, SIEM, UTM), Network Monitoring, Policy and Charging, Application Delivery and Optimisation, Data Analytics and Business Intelligence.

  • Network Security (Firewalls, IPS/IDS, SIEM, UTM)
    Reliably classify network protocols and applications – independent of TCP and UDP ports – for improved network access control. DPI is a commitment to maximum network security and a powerful basis for individual company security policies. By integrating ipoque PACE, security vendors quickly gain accurate application visibility and control and can improve how their products manage security threats and prevent network attacks.
  • Policy, Charging and Billing Systems (BSS)
    Collect details on actual protocol and application usage to be able to report on and monitor usage and bill by application or bandwidth used. Dynamic control over QoS and charging will help operators monetize their LTE investments. By integrating ipoque PACE, policy and charging and BSS vendors can introduce new capabilities to their products and keep up with the dynamic changes in protocols and applications.
  • Network and Traffic Management (QoS/QoE)
    The proliferation of smart devices, mobile apps, and connected services is causing a surge in network traffic. Provide better quality of service (QoS) across fixed and mobile networks with bandwidth priorities, guarantees and caps on a per protocol and per application basis. The integration of ipoque PACE allows prompt identification of applications to Layer 7 and helps vendors and operators to improve the quality of customer experience.
  • Analytics and Business Intelligence
    Know your customers better and their favourite apps, as this enables operators to develop personalized services and create new revenue opportunities. Analytics and BI solution vendors must go beyond collection of server logs and can use ipoque’s PACE to gather detailed application usage information directly from the traffic, in real-time. Analytics can be used to identify and estimate network trends for future business planning, e.g. adjustments of data plans.
  • WAN Optimization and Application Controllers
    Boost the acceleration of applications for particular customer needs. e.g. VoIP, Video conferencing. Prioritise key business traffic far more efficiently and ensure that bandwidth does not become congested, WAN optimization vendors need real-time application awareness and a deep understanding of complex applications running over their customers’ wide area network. ipoque PACE can identify thousands of applications behind IP sessions and get to the application level in real-time.

Field-Proven & Widely Deployed

PACE is the heart of ipoque’s PRX G-Series and DPX Network Probe with over 200 installations in more than 50 countries across the globe. PACE has also been successfully integrated in third-party firewalls, WAN optimization controllers, lawful interception systems and 3G/4G mobile network data gateway systems.

Flexible Integration in Any Target Platform

  • Runs on virtually any hardware architecture with at least 32-bit processor and C compiler
  • Can be used as a dynamic or static library in user space or as a kernel module in kernel space
  • 32-bit & 64-bit compatible in Little-endian and Big-endian architectures
  • Runs on any Linux and Windows environments
  • 100% proprietary code provides clean licensing without GPL compliance issues
  • Integrated connection/session tracking engine; existing implementations can also be used