A deep packet inspection and control device includes a first rule table unit for storing a rule table including a first set of rule entries which are pre-defined or generated dynamically; a first scanning unit for receiving a first real-time packet data stream from the internet, and scanning the first real-time packet data stream according to a scanning window defined by the first set of rule entries; a first analysis unit for matching the first real-time packet data stream with the first set of rule entries in the scanning window of the first scanning unit, and outputting a matching result; and a first rule linkage unit for performing linkage control on the first real-time packet data stream to be output back to the internet according to the matching result output from the first analysis unit.