Method and device for processing data

Abstract

The embodiment of the invention discloses a method and device for processing data. The specific implementation mode of the method comprises the following steps: receiving an access request to access atarget domain name; converting the target domain name into a preset high-security domain name; inquiring an IP corresponding to the high-security domain name in a domain name system; and sending theaccess request according to the IP corresponding to the high-security domain name, wherein if an EIP (Elastic IP) corresponding to the target domain name enables a black hole, the IP corresponding tothe high-security domain name in the domain name system is a preset high-security IP, otherwise, the IP corresponding to the high-security domain name in the domain name system is the EIP of the target domain name. According to the method for processing the data provided by the invention, in the whole process from triggering the black hole to removing the black hole, a user does not need to participate in the scheduling of high-security IP, and the high-security IP switching is completed in a full automatic way. The scheme guarantees the availability of services when being attacked, and guarantees the best experience of user services under normal circumstances.

Description

technical field [0001] Embodiments of the present disclosure relate to the field of computer technology, and in particular to methods and devices for processing data. Background technique [0002] Currently, the total bandwidth of the cloud computer room is limited, resulting in the provided EIP (Elastic IP, elastic public network IP) protection against DDoS (Distributed Denial of Service, distributed denial of service attack, which refers to a large-scale attack launched by a large number of controlled computers in the network. , Coordinated Denial of Service attack) attack capabilities are limited. Once the user EIP of the cloud computer room suffers a large-scale DDoS attack, we will call the major operators to blackhole the attacked EIP, and block all traffic accessing the EIP from entering the cloud computer room. The blackhole lasts for one day. The black hole solves the impact of DDoS attacks on the entire cloud computer room network, ensuring the stability of most u...

AI Technical Summary

Problems solved by technology

However, it does not happen frequently that user services are attacked by DDoS. Under normal circumstances, the traffic accessing user services finally reaches EIP through the high-defense IP, and the experience of not directly accessing EIP is better.

The number of high-defense IPs is limited, and the number of high-defense IPs purchased by the same user is limited. When users need to purchase high-defense services for a large number of EIPs, it cannot satisfy

Images