SYSTEMS AND METHODS FOR QUALITY OF SERVICE OF ENCRYPTED NETWORK TRAFFIC

摘要

The present invention is directed towards systems and methods for providing classification of an encrypted network packet for performing QoS and acceleration techniques. Encrypted packets may be classified by a first classifier at a first portion of a network stack of a device as corresponding to a first predetermined application, and an application identifier may be included with the packet. In some embodiments, the packets may be decrypted in an order dependent on a first classification of the encrypted network packet. After decryption, packets may be reclassified as corresponding to a second predetermined application by a second classifier operating at a second portion of a network stack of the device above the first portion. Thus, network performance may be enhanced and optimized by providing QoS and acceleration engines with packet- or data-specific information corresponding to the application, while avoiding inefficiencies due to a lack of prioritization of decryption.

主权项

1. A method for providing classification of encrypted network traffic, the method comprising:
(a) including, by a first classifier of a device, a first application identifier with an encrypted packet from classification of the encrypted packet; (b) identifying, by a second classifier of the device, a second application identifier from classification of decrypted content of the encrypted packet; and (c) determining, by the second classifier, that the second application identifier is a more granular classification than the first application identifier.