Invention Grant
US09014002B2 Early traffic regulation techniques to protect against network flooding
有权
早期的交通管制技术,以防止网络洪水
- Patent Title: Early traffic regulation techniques to protect against network flooding
- Patent Title (中): 早期的交通管制技术,以防止网络洪水
-
Application No.: US13969341Application Date: 2013-08-16
-
Publication No.: US09014002B2Publication Date: 2015-04-21
- Inventor: Baoqing Ye
- Applicant: Palo Alto Networks, Inc.
- Applicant Address: US CA Santa Clara
- Assignee: Palo Alto Networks, Inc.
- Current Assignee: Palo Alto Networks, Inc.
- Current Assignee Address: US CA Santa Clara
- Agency: Van Pelt, Yi & James LLP
- Main IPC: H04L12/26
- IPC: H04L12/26 ; H04L12/931 ; H04W28/02 ; H04W28/10 ; H04L12/801 ; H04L12/823 ; H04L29/06

Abstract:
Methods and apparatus for providing an Anti-Flooding Flow-Control (AFFC) mechanism suitable for use in defending against flooding network Denial-of-Service (N-DoS) attacks is described. Features of the AFFC mechanism include (1) traffic baseline generation, (2) dynamic buffer management, (3) packet scheduling, and (4) optional early traffic regulation. Baseline statistics on the flow rates for flows of data corresponding to different classes of packets are generated. When a router senses congestion, it activates the AFFC mechanism of the present invention. Traffic flows are classified. Elastic traffic is examined to determine if it is responsive to flow control signals. Flows of non-responsive elastic traffic is dropped. The remaining flows are compared to corresponding class baseline flow rates. Flows exceeding the baseline flow rates are subject to forced flow rate reductions, e.g., dropping of packets.
Public/Granted literature
- US20140056139A1 EARLY TRAFFIC REGULATION TECHNIQUES TO PROTECT AGAINST NETWORK FLOODING Public/Granted day:2014-02-27
Information query