Patent ID: 8250646

Claim:
A method for filtering packets, wherein a deep packet inspection (DPI) proxy server is configured at an access-network user side on a distributed basis, comprising: by the DPI proxy server, identifying a service type and/or contents of a received packet; determining a processing mode corresponding to the identified service type and/or contents according to a preset DPI filtering policy; and performing DPI filtering on the packet according to the determined processing mode; wherein the step of performing DPI filtering on the packet comprises: if the processing mode corresponding to the identified service type and/or contents in the DPI filtering policy is “redirection”, forwarding the packet to a DPI server for DPI, wherein the DPI comprises: by the DPI server, identifying the service type and/or contents of the received packet; analyzing the identified service type and/or contents of the packet; determining a processing mode corresponding to the packet; and processing the packet according to the determined processing mode; if the processing mode corresponding to the identified service type and/or contents in the DPI filtering policy is “pass allowed”, sending the packet according to a destination address of the packet; and if the processing mode corresponding to the identified service type and/or contents in the DPI filtering policy is “traffic limiting”, limiting the traffic of the packet according to a preset DPI traffic limiting policy.