What would it take to do DPI?

[Bamsefar]

So I have this dream (yea right....) to somehow have DPI (Deep Packet Inspection) running in my router to be able to do some minor modifications to URLs that are sent (SSL). Now I do admit, I don't know enough, rather I know just to little about what I am now asking, however I can not learn without asking...

So What do I need to look for to be able to do DPI, and in this case I will include an example, I would like to go from:

https://logs2.xiti.com/go.ad?xts=37...alare_och_receiver_71442779.htm?ca=11&w=1

to:

https://www.blocket.se/stockholm/Dvd_spelare_med_hogtalare_och_receiver_71442779.htm?ca=11&w=1

In the logic world this is easy, then we added https (SSL) and it becomes somewhat more of a challenge.

Is there any open source software that I could use for this, or do I have to go pfSense or something?

 

[RMerlin]

The instant you introduce SSL means you can forget about any way to do it at the packet level. DPI won't help you.

 

[sfx2000]

The instant you introduce SSL means you can forget about any way to do it at the packet level. DPI won't help you.

DPI does do SSL...

https://www.google.com/#q=sandvine+ssl+deep+packet+inspection

The demands obviously are outside of the scope/capability of most home/small business users - but consider the upstream...

 

[RMerlin]

DPI does do SSL...

https://www.google.com/#q=sandvine+ssl+deep+packet+inspection

The demands obviously are outside of the scope/capability of most home/small business users - but consider the upstream...

He wants not only to access the encrypted payload, but to modify it. You'd need a MITM-type of setup to be able to do this.

 

[sfx2000]

He wants not only to access the encrypted payload, but to modify it. You'd need a MITM-type of setup to be able to do this.

That's what Sandvine can do...

How many times has one seen video or pix that have been "optimized"...

 

[mstombs]

Agree that you should not be able to interfere with SSL comms, without NSA resources and their alleged massive look-up tables of prime factors of big numbers... But do take a look at pixelserv-tls, if the router pretends to be the first tracking host it would see the second url. pixelserv does have some redirect code, the idea being the browser is referred to the real site and carries on from there, I have never studied in detail but the non-tls version did work on some http sites a while ago.

 

[Nullity]

That's what Sandvine can do...

How many times has one seen video or pix that have been "optimized"...

I've heard of traffic-shaping ("optimizing"?) encrypted packets, but not modifying encrypted packets, which is what OP wants.

 

[jernau]

Think trying to do SSL encrypted packet inspection on a home router could get messy quickly given you are going to have to install the CA cert on all your clients and then the router is going to have to generate certs on the fly which I imagine is going to chew up resources quickly on a consumer router....

 

[sfx2000]

Think trying to do SSL encrypted packet inspection on a home router could get messy quickly given you are going to have to install the CA cert on all your clients and then the router is going to have to generate certs on the fly which I imagine is going to chew up resources quickly on a consumer router....

One's not going to do any real DPI on a home router, period...