Anti-DDoS attack protection system suitable for the field of internet data center

Abstract

The invention relates to an anti-DDoS attack protection system suitable for the field of an internet data center. The system comprises an internet, a zombie host, a POP access router switch, an IDC server hosting area, a cloud host service area, a core switch, a boundary node, an attack packet detection analyzer and a DDoS attack cleaning device. The internet is respectively connected with the zombie host and the boundary node. The boundary node is respectively connected with the core switch, the attack packet detection analyzer and the DDoS attack cleaning device. The attack packet detection analyzer is connected with the DDoS attack cleaning device. The core switch is respectively connected with the POP access router switch, the IDC server hosting area and the cloud host service area. Compared with systems in the prior art, the system has advantages of being low in cost, high in efficiency and full-automatic in protection.

Description

technical field [0001] The invention relates to an anti-DDoS attack protection system, in particular to an anti-DDoS attack protection system applicable to the field of Internet data centers. Background technique [0002] A DDoS attack is an attack method in which an attacker uses thousands of hosts that have been invaded and controlled on the Internet (called: zombie hosts) to send a large number of data packets to the target host, causing the other party to deny service. [0003] In recent years, Internet security incidents have become more and more frequent. According to statistics, in the first half of 2013, the National Internet Security Information Center monitored a total of more than 7,000 mixed DDoS attacks, accounting for 4.1% of the total number of attacks. Among these attacks, relevant professionals According to the protocol analysis of the attack types, among these attacks, the icmp+tcp+udp attack method is the most common, accounting for 50.8% of the total numb...

AI Technical Summary

Problems solved by technology

[0006] 1. Series deployment can easily lead to a single point of failure. All traffic must be filtered through the cleaning device in real time, which is very inconvenient to manage;

[0007] 2. In the traditional technology, most of them are manual protection, that is, when the user is attacked, the user calls the relevant security personnel of the telecommunications to carry out manual traction, and the response time takes 30 minutes, which is too long, and waits for the user to notify the operator. The attack may also be terminated;

[0008] 3. Use netflow or sflow to import packets to the detection analyzer in proportion, and the detection timeliness and sensitivity are not high;

[0009] 4. One user deploys a protection system, and 100 users need to deploy 100 anti-ddos attack protection devices. The cost is too high, which is not conducive to environmental protection and low-carbon energy saving

Images