International Telecommunication Union approved recommendations for Deep Packet Inspection

After a closed-door discussion, experts from the International Telecommunication Union (ITU) approved the standard (recommendations) Y.2770 for the use of Deep Packet Inspection technologies. Representatives of Russia and some other countries are proposing to make this standard mandatory for Internet providers.

Deep Packet Inspection (DPI) is a technology for checking and filtering network packets by their contents with the ability to change packets. Unlike firewalls, Deep Packet Inspection analyzes not only the headers, but also the content of traffic at the OSI model levels from the second and higher. DPI allows you to filter information that does not meet specified criteria. Such systems are useful for isolating specific URLs from HTTP requests or for restricting traffic to specific applications (for example, BitTorrent or HTTPS).

Y.2770 technical specifications do not provide for inspection of encrypted traffic, but provide for mandatory inspection of unencrypted fragments of such traffic.

Russian telecom operators MTS and Megafon are already using DPI systems . MTS companies set up such a system at a cost of $ 50 million. Vimpelcom and Rostelecom began testing DPI in their networks.
')
In Russia, the demand for DPI systems may sharply increase after the entry into force of Federal Law No. 139 . The sale of DPI systems is carried out by the Internet Resource Analysis Center (CIDA), which operates through the non-profit organization League of Safe Internet. The LBI organization is formally the initiator of the adoption of Law No. 139.


^{Source: TSAIR presentation “The concept of a secure Internet in the Russian Federation” (pdf)}