Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Method and device for checking legality of traffic policy

A legality and flow technology, applied in the field of communication, can solve the problems affecting the normal business use of customers, the consumption of network equipment memory resources, and the performance degradation of network equipment.

Active Publication Date: 2020-10-27
NEW H3C TECH CO LTD
View PDF6 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

This will take a long time, and during this period of time, the memory resources of the network equipment will be greatly consumed, resulting in a decrease in the performance of the network equipment and affecting the normal use of customers.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for checking legality of traffic policy
  • Method and device for checking legality of traffic policy

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0020] In order to improve the efficiency of checking the validity of traffic policies, save system resources, and ensure the normal business of customers, the embodiments of the present invention provide a method and device for checking the validity of traffic policies.

[0021] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

[0022] It should be noted that, in the case of no conflict, the embodiments of the present invention and the features in the embodiments can be combined with each other. The pr...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The embodiment of the invention provides a method for verifying the validity of a flow strategy, and the method is used in any network equipment. The method comprises the steps: recognizing a target address, which is in inclusive or included relation with the target address of changed unicast routing, in the target address corresponding to each flow strategy stored locally when any unicast routing changes; determining the flow strategies corresponding to the recognized target addresses, and carrying out the inspection of the validity of each flow strategy. According to the embodiment of the invention, the method can improve the inspection efficiency of the validity of the flow strategies, saves the system resources, and guarantees the normal operation of businesses.

Description

technical field [0001] The invention relates to the technical field of communications, in particular to a method and device for checking the legality of traffic policies. Background technique [0002] The flow policy (Flow Specification) can be used to accurately match attack traffic (source address, destination address, port, source port, destination port, protocol type, etc.), and has multiple options for attack traffic: discard, rate limit, flow Redirection, etc., is an effective method to defend against denial of service (Denial of service, DoS) and distributed denial of service (Distributed Denial of service, DDoS) attacks. [0003] With the multi-protocol expansion capability of BGP (Border Gateway Protocol, Border Gateway Protocol), traffic policies can be easily distributed to devices configured with BGP protocol to limit the traffic that initiates DoS / DDoS attacks. [0004] When a network device uses a traffic policy to control traffic matching for a specific desti...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06
CPCH04L63/1408
Inventor 朱超鹏
Owner NEW H3C TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products