Protocol & Application Classification Engine

ipoque’s Protocol and Application Classification Engine (PACE) is a software library using deep packet inspection (DPI) technologies – including pattern matching and behavioral, heuristic and statistical analysis in real-time – to reliably detect network protocols, even if they use advanced obfuscation and encryption techniques. It helps network equipment vendors enhance their products with powerful and proven Layer 7 protocol network management and visibility capabilities. In addition it accelerates time-to-market for a variety of different application scenarios. PACE consists of fully configurable DPI software and has been optimized for performance and classification reliability. It is highly flexible and can be integrated in any existing platform such as firewalls, network security and policy management appliances.

  • Next-Generation Firewalls & WAN Optimization Controllers (WOC)
    Reliably classify network protocols and applications – independent of TCP and UDP ports for network access control. DPI is a commitment to maximum network security and a powerful basis for individual company security policies. Boost the acceleration of applications for particular needs, e.g. e-mail, VoIP, SIP.
  • Traffic Analysis, Accounting & Billing Systems
    Collect detailed statistics based on actual protocol and application usage for network resource planning, billing and accounting. Identify and estimate network trends based on long-term analysis, e.g. adjustments of data rate plans. Enables you to respond immediately to changes within your network.
  • Bandwidth Management & Policy Enforcement
    Network bandwidth management provides quality of service (QoS) in fixed-line and mobile networks with bandwidth priorities, guarantees and caps on a per protocol and per application basis. The integration of DPI allows prompt identification of challenges based on increasing over-the-top traffic (OTT). This improves network operator profitability and creates new streams of revenue. Network environment assurance, e.g. protection against DDoS attacks, is included.
  • Lawful Interception
    Reliably classify intercepted traffic for negative and positive filtering, protocol-based load balancing and improved post-processing. Real-time support for key communication technologies such as VoIP and e-mail.

Field-Proven & Widely Deployed

PACE is the heart of ipoque’s PRX G-Series and DPX Network Probe with over 200 installations in more than 50 countries across the globe. PACE has also been successfully integrated in third-party firewalls, WAN optimization controllers, lawful interception systems and 3G/4G mobile network data gateway systems.

Flexible Integration in Any Target Platform

  • Runs on virtually any hardware architecture with at least 32-bit processor and C compiler
  • Can be used as a dynamic or static library in user space or as a kernel module in kernel space
  • 32-bit & 64-bit compatible in Little-endian and Big-endian architectures
  • Runs on any Linux and Windows environments
  • 100% proprietary code provides clean licensing without GPL compliance issues
  • Integrated connection/session tracking engine; existing implementations can also be used