A traffic flow identification method, comprising: obtaining (S601), by a first device, a to-be-identified traffic flow; obtaining (S602), by the first device, to-be-identified terminal-side information and to-be-identified packet header statistics information based on the traffic flow, wherein the terminal-side information is used to indicate attribute information of a device associated with the traffic flow, and the packet header statistics information is information obtained by collecting statistics about packet header information in the traffic flow in a preset time window; and determining (S603), by the first device, a type of the traffic flow based on the terminal-side information and the packet header statistics information by using a traffic flow identification model; characterized in that before the determining, by the first device, a type of the traffic flow based on the terminal-side information and the packet header statistics information by using a traffic flow identification model, the method further comprises: sending (S6001), by the first device, the to-be-determined terminal-side information to a second device; and obtaining (S60021), by the second device, the traffic flow identification model that matches the to-be-identified terminal-side information; receiving, by the first device, the traffic flow identification model that is sent (S6003) by the second device and that corresponds to the terminal-side information. obtaining (S601), by a first device, a to-be-identified traffic flow; obtaining (S602), by the first device, to-be-identified terminal-side information and to-be-identified packet header statistics information based on the traffic flow, wherein the terminal-side information is used to indicate attribute information of a device associated with the traffic flow, and the packet header statistics information is information obtained by collecting statistics about packet header information in the traffic flow in a preset time window; and determining (S603), by the first device, a type of the traffic flow based on the terminal-side information and the packet header statistics information by using a traffic flow identification model; characterized in that before the determining, by the first device, a type of the traffic flow based on the terminal-side information and the packet header statistics information by using a traffic flow identification model, the method further comprises: sending (S6001), by the first device, the to-be-determined terminal-side information to a second device; and obtaining (S60021), by the second device, the traffic flow identification model that matches the to-be-identified terminal-side information; receiving, by the first device, the traffic flow identification model that is sent (S6003) by the second device and that corresponds to the terminal-side information. sending (S6001), by the first device, the to-be-determined terminal-side information to a second device; and obtaining (S60021), by the second device, the traffic flow identification model that matches the to-be-identified terminal-side information; receiving, by the first device, the traffic flow identification model that is sent (S6003) by the second device and that corresponds to the terminal-side information. <EOS>