Protocol and Application Classification with Metadata Extraction

PACE 2.0 is ipoque’s next generation software that identifies thousands of applications and services and provides deeper insight on application attributes such as real-time performance metrics, all from a single solution. PACE 2.0 combines the power of our application classification (PACE) and decoding engine (PADE) into an all-in-one protocol and application classification engine also capable of advanced metadata extraction. This integrated solution makes it more efficient for customers to get deeper application insight for troubleshooting, security or subscriber analytics purposes. The granularity of detail is 100% configurable providing a completely scalable solution.

ipoque’s PACE 2.0 is a software library using different technologies such as deep packet inspection, behavioral, heuristic and statistical analysis to reliably detect network protocols and applications and extract metadata in real-time. Applications to Layer 7 (e.g. Skype, Facebook, YouTube, etc.) are accurately identified as well as services such as voice and video and calculation of key performance indicators for deeper insight.

PACE 2.0 addresses the growing need to manage the vast number of applications in all-IP mobile networks. Ever-increasing download speeds, file sharing and the growing adoption of high quality online video are leading to a surge in global IP traffic, making it essential to manage the Quality of Experience (QoE) for subscribers. Network equipment and security vendors can integrate PACE 2.0 software to enhance their products with full visibility into mobile applications and IP network traffic.

  • Network Security (NG Firewalls, IPS/IDS, SIEM, UTM)
    A primary security requirement is to reliably classify network protocols and applications– independent of TCP and UDP ports – for improved network access control. This includes identifying network protocols and apps from encrypted and obfuscated IP sessions in real-time and classifying and decoding network traffic as well as extracting web browsing session attributes like URLs, host, cookies etc. to distinguish between the good and the bad.
  • Policy, Charging and Billing Systems (BSS)
    Collect details on actual protocol and application usage to be able to report on and monitor usage and bill by application or bandwidth used. Dynamic control over QoS and charging helps operators to monetize their LTE investments. By integrating ipoque PACE, policy and charging and BSS vendors can introduce new capabilities to their products and keep up with the dynamic changes in protocols and applications.
  • Network and Traffic Management (QoS/QoE)
    Provide better quality of service (QoS) with bandwidth priorities, guarantees, caps and ability to charge on a per protocol and per application basis. The proliferation of smart devices, mobile apps, and connected services is causing a huge surge in network traffic. The integration of ipoque PACE allows prompt identification of applications to Layer 7 and helps vendors and operators to improve the quality of customer experience.
  • Analytics and Business Intelligence
    Know your customers better, as this enables operators to develop personalized services and create new revenue opportunities. Analytics and BI solution vendors can go beyond collection of server logs and use ipoque’s PACE to gather detailed application and subscriber behaviour information directly from the traffic, in real-time. Analytics can also be used to identify and estimate network trends for future business planning.
  • WAN Optimization and Application Controllers
    Boost the acceleration of applications for particular customer needs. e.g. VoIP, video conferencing. Prioritise key business traffic far more efficiently and ensure that bandwidth does not become congested. WAN optimization vendors can get an accurate picture of applications running on the network using protocol and application visibility that ipoque’s PACE software can provide.
  • Mobile Data Offload
    With LTE deployments, operators will need to selectively steer traffic flows based on the application used e.g. VoLTE or video. In order to implement differentiated flow steering, mobile data offload solution vendors need a reliable application detection technology to implement smarter offload strategies based on total flow visibility. This enables operators to control offload, charging and service delivery on a per-user basis. This has the added benefit of smoothing billing practices, improving delivering of new services and charging models.
  • Field-Proven & Widely Deployed
    PACE is successfully integrated in next generation firewalls, WAN optimization controllers, and 3G/4G mobile network data gateways. Leading Tier 1 mobile network equipment, network monitoring and security vendors rely on our software for accurate layer 7 application and protocol classification. PACE is also integrated in ipoque’s network traffic management PRX G-Series with over 200 installations in more than 50 countries across the globe.
  • Flexible and Easy Integration in Any Target Platform
    • Independent from hardware platform
    • Runs in any Linux, Mac, Solaris and Windows
    • Fully documented APIs, including code samples
    • Professional services for all stages of integration
    • Native C Interface