Flow processing method, equipment and system

Abstract

The invention discloses a flow processing method, equipment and a system. The method is applied to the system comprising primary defense equipment and advanced defense equipment. The flow cleaning capacity of the advanced defense equipment is higher than that of the primary defense equipment. The method comprises steps: management and control equipment monitors whether the load of the primary defense equipment for cleaning the user flow is larger than a first threshold; if the monitoring result is positive, the management and control equipment transfers the flow processed by the primary defense equipment to the advanced defense equipment for cleaning; and the management and control equipment controls the flow with cleaning completed to be transferred to service processing equipment for processing, and thus, different defense equipment can be selected for flow cleaning according to a specific condition, and the using cost is reduced. Besides, the series of operation is carried out in a condition with no perception of the user, the user does not need to perform extra operation, and through dynamically scheduling the defense equipment, the user experience is improved.

Description

technical field [0001] The embodiments of the present application relate to the technical field of communications, and in particular, to a traffic processing method, device, and system. Background technique [0002] Such as figure 1 As shown, it is a schematic diagram of a DDoS (Distributed Denial of Service, Distributed Denial of Service) attack. The attacker uses a bot to launch a DDoS attack. The attack causes the resources of the business server to be exhausted, thereby denying the service of normal users; Some defenses include: [0003] 1. DDoS traffic cleaning, which is currently the most commonly used method of defense against DDoS, detects DDoS attacks through DDoS detection equipment and gives an early warning. When a DDoS attack is found, it notifies the bypass traffic cleaning equipment to pull the traffic of the attacked destination IP and clean the attack traffic. Reinject normal flow. [0004] 2. Publish black hole routes on the carrier network, that is, whe...

AI Technical Summary

Problems solved by technology

[0007] Aiming at the defect that high cost and low efficiency cannot be solved in the defense against DDoS in the prior art, thus affecting the normal business of users, this application proposes a traffic processing method, which is

Images