By concealing more layers of critical traffic information, new encryption protocols such as TLS 1.3, TLS 1.3 0-RTT and ESNI have led to a significant loss in traffic visibility, resulting in poor network performance, heightened susceptibility to security risks, and inefficiencies in resource utilization. At the same time, the existing use of decryption methods such as SSL/TLS inspection are continuously challenged by various security, regulatory and practicality issues.
This report, which is based on a survey of 34 leading networking vendors, assesses the evolution of deep packet inspection (DPI) techniques in response to newer and tougher encryption protocols.