Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Message forwarding method and network device

A network device and message forwarding technology, applied in the field of data communication, can solve the problems of loss of SIP proxy server resources, Max-Forwards value cannot be too small, etc., to achieve the effect of improving processing performance and preventing loop attacks

Inactive Publication Date: 2007-11-28
HUAWEI TECH CO LTD +1
View PDF0 Cites 6 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] In the process of realizing the present invention, the inventor found that there are at least the following problems in the prior art. In order to avoid normal packets from being discarded before reaching the destination address, the Max-Forwards value cannot be too small. When there is a SIPLoop loop attack, the SIP Loop loops Max-Forwards times, until the Max-Forwards value is 0, the loop attack will stop, this loop process consumes the resources of the SIP proxy server

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Message forwarding method and network device
  • Message forwarding method and network device
  • Message forwarding method and network device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0016] Please refer to FIG. 1 , which is a flowchart of a method for forwarding packets according to Embodiment 1 of the present invention.

[0017] Step 101. The SIP proxy server sets the address of the SIP proxy server in the network when the system is initialized; wherein, the address of the SIP proxy server can be a domain name address and / or an Internet (Internet Protocol, IP) address.

[0018] The SIP proxy server sends a broadcast message to other SIP proxy servers or directly sends a request message to the core control device to obtain the SIP proxy server address in the network, and save the obtained SIP proxy server address in the legal proxy server database.

[0019] When SIP proxy server A breaks down or exits, it can send status information or error information to other SIP proxy servers; after other SIP proxy servers receive the status information or error information, delete the SIP proxy server A from the legal proxy server database Address information. Each S...

Embodiment 2

[0030] Please refer to FIG. 2 , which is a flowchart of a method for forwarding packets according to Embodiment 2 of the present invention.

[0031] Step 201.SIP proxy server receives the SIP response message carrying the path address; obtains the path address carried by the SIP response message, uses the path address as the SIP proxy server address in the network, and judges whether the SIP proxy already exists in the legal proxy server database The server address, if yes, does not need to save the SIP proxy server address in the legal proxy server database; if not, save the SIP proxy server address in the legal proxy server database. The route address refers to the link address of the routing field (Via) in the SIP response message.

[0032]In order to ensure the legitimacy of the SIP response message, it can cooperate with the session transaction detection mechanism to prevent the attacker from forging the SIP response message. The session transaction detection mechanism c...

Embodiment 3

[0040] Please refer to FIG. 3 , which is a schematic diagram of a network device according to Embodiment 3 of the present invention. This network equipment 300 comprises: proxy server address acquisition unit 301, is used for obtaining the SIP proxy server address in the network from other network equipment, sends SIP proxy server address to proxy server address preservation unit; Proxy server address preservation unit 302, is used for preserving The SIP proxy server address in the network; the registration request message receiving unit 303 is used to receive the SIP registration request message carrying the contact address; the contact address obtaining unit 304 is used to obtain the initial protocol registration request message carried by the registration request message receiving unit 303 Contact address; registration request message processing unit 305 is used to determine that the contact address obtained by contact address acquisition unit 304 is the SIP proxy server add...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a report transferring method and network equipment, which comprises the following steps: receiving initial protocol register request message of conversation with connecting address; acquiring the connecting address of the request message; affirming the agent server address of the initial protocol in the preserved network of the connecting address; proceeding abnormal disposal for the initial protocol register request message. The invention can prevent circulated attach of SIP Loop.

Description

technical field [0001] The invention relates to the field of data communication, in particular to a method and network equipment for forwarding messages. Background technique [0002] The next generation network (Next Generation Network, NGN) is developing rapidly in the world, and the Session Initiation Protocol (Session Initiation Protocol, SIP) is widely used in the NGN network. A denial of service (Denial Of Service, DoS) attack is a common network attack method, and a loop attack (Loop) is a specific form of the DoS attack. SIP Loop attack means that a SIP registration request message (Register) is routed to the SIP proxy server, the SIP proxy server processes and forwards the SIP registration request message, and then the message reaches the SIP proxy server again, and the proxy server The processing of the SIP registration request message by the server is exactly the same as last time. For example, user user1@domain1.com registers user2@domain2.com as its own Contac...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L12/56H04L29/06
CPCH04L65/105H04L65/1073H04L65/1006H04L29/06285H04L29/06333H04L29/06197H04L45/00H04L65/1045H04L65/1104
Inventor 辛阳刘利锋郑志彬朱洪亮赵凯杨义先
Owner HUAWEI TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products