Intelligent Traffic Analysis
System Components
The TDE determines which service flows are to be detected and sends them to the TAP.
The TAP is a built-in chip on the CPU of a device. It processes and analyzes the service flows received from the TDE, and exports analysis results to the TDA.
The TDA is a network traffic analysis tool that provides a graphical user interface (GUI) to make it convenient for users to obtain, view, and analyze collected data. Currently, only FabricInsight can function as the TDA.
In actual applications, the TDE and TAP are deployed on the same device enabled with the intelligent traffic analysis function. In Figure 1, when packets in a specified service flow are sent and received along the same path, each device through which the flow passes can obtain the bidirectional traffic of the flow. You can analyze indicators, such as the packet loss rate and delay, of the flow on these devices.
Mechanism of the Intelligent Traffic Analysis System
As shown in Figure 2, the working process of the intelligent traffic analysis system is as follows:
- A service flow to be detected is specified on the TDE and an ACL rule is delivered to match the service flow. The TDE then sends the received service flow matching this ACL rule to the TAP through the forwarding chip.
- The TAP processes the received service flow. If the service flow meets requirements, the TAP creates a flow table for analysis. If the requirements are not met or the processing performance exceeds the specifications, the packets are discarded.
- The TAP encapsulates the packet with the analysis result and the TDA's IP address as the destination address, and sends the packet to the forwarding chip for route-based forwarding. When receiving the packet, the TDA then performs further analysis and display.