Method and system for integrating protection and load balancing of distributed denial of service

Abstract

The invention discloses a method and a system for integrating protection and load balancing of distributed denial of service. The method comprises the following steps: judging the type of a received message, and transmitting the message to a protection module corresponding to the type of the message according to the type of the message to perform detection to acquire an attach message and a normal message; filtering the attack message or transmitting the normal message to a kernel thread module by the protection module corresponding to the type of the message; and modifying the message according to the type of the message by the kernel thread module and transmitting the message. According to the method and the system, the protection function and the load balancing function of the distributed denial of service are integrated on the same equipment, the cost problem caused by single protection equipment is solved, and protection equipment and load balancing equipment can cooperate with each other efficiently; and the copy quantity of the message is reduced during load balancing, and influence on equipment performance is avoided.

Description

technical field [0001] The invention relates to the field of computer communication, in particular to a method and system integrating distributed denial of service attack protection and load balancing. Background technique [0002] Distributed Denial of Service attack (Distributed Denial of Service, DDoS) is currently the most common means of network attack, with the characteristics of simplicity, violence, and good attack effect, and can have a great impact on the service of the attacked target. With the development of the Internet, the current attacks are characterized by larger attack bandwidth and more frequent attacks, and the impact is more and more serious. [0003] DDoS is aimed at destroying the "availability" of the attacked target. This attack method uses the defect of the network service function of the target system or directly consumes its system resources, so that the target system cannot provide normal services. [0004] For nodes, a common protection method...

AI Technical Summary

Problems solved by technology

[0005] However, the problems existing in the existing technology are: (1) the node DDoS protection needs to deploy hardware, which will increase the cost; (2) the independent protection equipment and the load balancing equipment are independent of each other, and the connection state is prone to be inconsistent, so that the protection and There is a problem with traffic processing; (3) There are many processing procedures on the load balancing device, which affects the performance of the overall system

Images