Interkey productsInterkey Intelligent DPI

Deep packet inspection for Saudi telecom networks

Interkey Intelligent DPI detects, classifies and controls traffic in real time at carrier scale. It is an Interkey product, developed in technology collaboration with Huawei, deployed on the operator’s own infrastructure and supported from Riyadh.

Traffic stays in-Kingdom Real time, carrier scale

Orientation

At a glance

The whole page in one table, before the detail.

ProductInterkey Intelligent DPI, an Interkey product
Technology modelDeveloped in technology collaboration with Huawei; localisation, integration and Riyadh support by Interkey
DeploymentInline or out-of-band, on the operator’s own infrastructure
ClassificationApplication and protocol identification, including encrypted and tunnelled flows
Recognition accuracy99%, as stated in Interkey’s own product material (see the note below: validate on your own traffic)
Commercial modelQuote only: priced per deployment and capacity

What Interkey adds

What localisation actually consists of

Interkey Intelligent DPI is developed in technology collaboration with Huawei. The inspection technology comes out of that collaboration; the product an operator buys, deploys and calls at 2am is Interkey’s. It is neither a Huawei box with a local reseller attached, nor a claim that Interkey created every component underneath it.

The workWhat it means
Localisation and customisationAdapting the product to how networks are built and operated here: the traffic mix, the application set, and the regulatory reporting an operator owes.
Local data collectionThe classifier is only as current as the traffic it has seen, so data is collected locally, on the applications and protocols actually in use here.
Integrated deliveryDeployment into a live operator network is an integration project with the policy, billing, security and reporting systems already in place. Interkey does that integration rather than handing over a box.
Riyadh maintenance and supportRun and supported by a Riyadh engineering team, in Arabic and English, on the Saudi working week — a call rather than a ticket queue.

Why DPI

The problem deep packet inspection solves

An operator can say how much traffic crossed its network last night. Saying what that traffic was is the harder question, and the one that matters.

Without it, congestion is diagnosed by guesswork, a policy meant to protect voice quality cannot be verified, and a security team has flow records but no idea which application produced them. Deep packet inspection answers it by classifying traffic in real time, at the rate the network actually runs at.

Under the hood

How Interkey Intelligent DPI works

  1. Traffic

    Inline, where it can act, or out-of-band, where it only observes; most operators start out-of-band

  2. Classification

    Observable flow characteristics, packet sizing and timing, handshake structure, endpoint behaviour, not port numbers or payload alone

  3. Identified traffic

    Application Protocol
  4. Outcomes

    Real-time policy engine, per application, subscriber group or cell Reporting layer for capacity and regulatory teams

Classification is traffic-dependent: a classifier tuned on one operator’s subscriber mix will not behave identically on another’s, which is why accuracy figures always need a proof of concept against your own traffic.

On the 99% figure.

Interkey’s own product material states 99% recognition accuracy for Interkey Intelligent DPI. That figure is Interkey’s own measurement of its own product. It has not been independently benchmarked and is not a specification for your network. DPI accuracy is a function of the traffic it is measured against: subscriber mix, application mix, how much is encrypted, and how recently the classifier was updated. Insist on a proof of concept measured against a sample of your own live traffic.

Use cases

What classification is actually for

Classification is the input; these are the decisions it feeds, and the one that decides where the platform may run at all.

DecisionWhat knowing the application changes
Congestion and capacityCapacity goes where a specific class of traffic is saturating a specific part of the network, rather than everywhere.
Policy enforcementFair-use rules, tiered plans and quality-of-service commitments all depend on identifying the traffic they refer to. Without classification a policy is an intention, not a control.
Security visibilityCommand-and-control traffic, tunnelling and traffic that does not match the application it claims to be are visible to a classifier in a way they are not to flow records. This complements a security operations capability rather than replacing it.
Regulatory reportingSaudi operators report against requirements that assume the operator can describe its own traffic. DPI is usually the system that makes those reports possible.
Where it may runInspection touches subscriber data by definition. Deploying in-Kingdom, supported from Riyadh, keeps that data in the operator’s own environment and inside Saudi jurisdiction — and makes a Sunday-morning classification problem a local call.

The proof of concept

What a DPI proof of concept involves

A PoC establishes how the platform behaves on your subscriber mix, your application mix and your encrypted share — not that the product works. Three things decide whether it produces evidence you can defend internally.

  1. Stage 01

    Acceptance criteria agreed in writing first

    What is tested, on which traffic, measured how, and what counts as a pass — settled before any equipment moves. A PoC without pre-agreed criteria is a demonstration.

  2. Stage 02

    Out-of-band first, measured against your ground truth

    The platform classifies without touching the forwarding path, so nothing can degrade service. Classification is then compared against traffic you can verify independently, with the false-positive rate measured as seriously as the detection rate.

  3. Stage 03

    Report-only policy, then the decision

    Policy logic runs in report-only mode before it is real, and inline enforcement follows only once classification has earned it. The result is a number your own engineers measured.

In Saudi telecommunications since 1999

The networks this platform inspects

Huawei technology collaboration

The inspection technology behind an Interkey product

In-Kingdom manufacturing in the group

Interkey Semiconductor, Riyadh

Next step

Discuss a DPI proof of concept

A sentence on where the visibility gap sits — RAN, core or peering — and whether a live-traffic proof of concept is thinkable this year is enough to start.

or Visit the Interkey Intelligent DPI site

The Riyadh team replies on Saudi working days, in Arabic and English.

Published by Interkey. Last updated . Interkey is registered in Riyadh, Saudi Arabia under commercial registration 1010156897.