Network flux cleaning system

Abstract

The invention provides traffic rinsing system for monitoring and managing network traffic in network application environment comprising abnormal detection module, attack module and identifying module and traffic rinsing equipment. The abnormal detection module monitors the network traffic, creates strategy routing and transmits to designated router of network application environment once finding suspect network traffic; the designated router tows the suspect network traffic to traffic rinsing equipment; the traffic rinsing equipment mirrors the received suspect network traffic to attack detection and identifying module for identifying the attack traffic, and create ACL rule according to the related information of attack traffic, then transmits to traffic rinsing equipment; the rinsing equipment separates suspect traffic and normal traffic in the suspect network according to ACL rule. The invention adopts mechanism of separate decision-making and control so that the attack detection and identifying course as decision have huge agility.

Description

technical field [0001] The invention relates to a network flow cleaning system, in particular to a network flow cleaning system which separates decision-making from control. Background technique [0002] Traffic cleaning technology is an emerging abnormal traffic detection and control technology in recent years, which has an excellent effect on the monitoring of DDoS attacks (distributed denial of service attacks) and network intrusions. The principle of traffic cleaning is to use BGP route notification to change the traffic forwarding direction after discovering a network attack behavior, pull the traffic to a designated node, and then use the abnormal traffic filtering device to process the redirected traffic, and to filter the abnormal traffic in the redirected traffic. Filtering, rate limiting, and injecting legal traffic back into the network, thus avoiding DDoS attacks. [0003] According to the above principle of traffic cleaning, a corresponding traffic cleaning sys...

AI Technical Summary

Problems solved by technology

The existing traffic cleaning system is only suitable for a certain manufacturer's own router, and the modules in the system cannot support the access of other cleaning devices because of the adoption of some proprietary protocols

Defects in openness and standardization can no longer adapt to the current situation and needs of diversification of operators' network equipment sources

Taking Cisco's traffic cleaning center as an example, the aforementioned figure 1 The routers in the network, including the far-end, near-end and affiliated routers, must use Cisco related routers to complete network traffic cleaning, which limits the promotion and use of traffic cleaning systems

[0015] In the prior art, besides Cisco’s traffic cleaning center, there are other types of traffic cleaning systems, but these existing traffic cleaning systems are either similar to Cisco’s products, or are completely different in implementation principles, and are completely different. The structure and type of flow cleaning system cannot well overcome the defects in the aforementioned flow cleaning system

Images