P2P Traffic in Linux Heterogeneous Networks

In a Linux operating system, P2P Traffic in a heterogeneous network-Linux Enterprise Application-Linux server application information. For details, refer to the following section. Peer-to-Peer (P2P) is a new technology used for file exchange. It allows you to establish distributed, dynamic, and anonymous logical networks over the Internet. P2P is a peer-to-peer connection or peer-to-peer network technology. It can be used in file sharing and exchange, deep search, distributed computing, and other fields. It allows individual PCs to share files over the Internet. With the popularization of P2P file exchange applications, ISP is facing new challenges and opportunities in maintaining and increasing the benefits of the broadband network.

According to statistics, over 70% of the existing network bandwidth is occupied by P2P communication. P2P communication can cause abnormal traffic peaks and unexpected deformation of network resources. problems such as network congestion and performance degradation have affected normal network applications, for example, WWW and Email. Slow web browsing and sending and receiving speeds lead to dissatisfaction among common users.

To control P2P communication, it is necessary to effectively identify P2P communication. However, many P2P communication uses different communication technologies and protocols and it is very difficult to identify them using traditional technologies. For example, many P2P protocols use dynamic ports instead of fixed ports, including ports of some well-known services.

KaZaA can use port 80 (usually http/web) for communication, thus penetrating the traditional firewall and Packet Filter Based on IP and port. Therefore, it is difficult to identify, track, or control such communications by simply classifying IP addresses and ports (analyzing IP headers, IP addresses, and port numbers. In the past, some people used monitoring 6881 ~ Port 6889 is used to identify BT (BitTorrent), but this method has long expired-BT no longer uses a fixed 6881 ~ Port 6889 is used for communication, but the port is used dynamically. With the growth of P2P applications, more communication protocols are used. The technology for identifying and classifying P2P must be fast and simple to adapt to the changes of this technology.

Now, the method to identify P2P communication is to analyze data packets at the application layer, check whether there is an application protocol signature, and then determine the communication type. The basic method for analyzing data packets at the application layer is that if the header of the data packet at the application layer contains a feature string "220 ftp server ready", it can be determined that the ftp program is used; if there is a feature string "HTTP/1.1 200 OK", it can be determined that the data is transmitted using http.