Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Flow spec route issuing method and device

A routing and forwarding chip technology, applied in the field of communication, can solve the problem of consuming large resources, achieve the effect of reducing quantity, improving performance, and saving entry resources

Active Publication Date: 2016-12-21
NEW H3C TECH CO LTD
View PDF2 Cites 6 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] With the development of technology, the scale of DDoS attacks is getting bigger and bigger, and the number of generated Flow spec routes is also increasing. Therefore, it is necessary to send a large number of Flow spec routes on the forwarding chip of each network device, which consumes a lot of resources.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Flow spec route issuing method and device
  • Flow spec route issuing method and device
  • Flow spec route issuing method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0021] The terminology used in the present invention is for the purpose of describing specific embodiments only, not limiting the present invention. As used herein and in the claims, the singular forms "a", "the", and "the" are intended to include the plural forms as well, unless the context clearly dictates otherwise. It should also be understood that the term "and / or" as used herein is meant to include any and all possible combinations of one or more of the associated listed items.

[0022] It should be understood that although the terms first, second, third, etc. may be used in the present invention to describe various information, the information should not be limited to these terms. These terms are only used to distinguish information of the same type from one another. For example, without departing from the scope of the present invention, first information may also be called second information, and similarly, second information may also be called first information. Dep...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention provides a Flow spec route issuing method and device. The method comprises the steps that a Flow spec route is acquired; if the Flow spec route comprises a source IP address, whether a neighbor network device which issues the route of the source IP address is a network device in a carrier network is judged; and if the neighbor network device is a network device in the carrier network, the Flow spec route is refused to be issued to a forwarding chip. According to the technical scheme provided by the invention, the number of Flow spec routes issued on the forwarding chip can be reduced; the entry resource of the Flow spec route can be saved; the CPU scheduling process can be reduced; and the performance of a system can be improved.

Description

technical field [0001] The present invention relates to the technical field of communications, in particular to a method and device for issuing Flow spec routes. Background technique [0002] As an attack method, DDoS (Distributed Denial of Service, Distributed Denial of Service) attack refers to the use of client / server technology to combine multiple computers as an attack platform to launch a DDoS attack on one or more targets, thus becoming a Double the power of denial of service attacks. [0003] Such as figure 1 As shown in the figure, it is a schematic diagram of a network to prevent DDoS attacks, assuming that host 2 sends a message to host 1, and the user-side device connected to host 1 can receive the message. If the packet is identified as an attack packet, a Flow spec (data flow specification) route for the packet is generated. [0004] The user-side device sends the Flow spec route to network device 1. After receiving the Flow spec route, network device 1 send...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/751H04L12/721H04L12/741H04L29/06H04L45/02H04L45/74
CPCH04L45/02H04L45/14H04L45/74H04L63/1458
Inventor 余清炎刘永奎代瑞强
Owner NEW H3C TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products