A method, device and system for handling traffic

Abstract

The present invention relates to the technical field of communications, in particular to a method, device and system for handling traffic. According to a method for handling traffic provided by an embodiment of the present invention, after receiving the target traffic sent by the user equipment, the egress router sends the traffic to the service gateway corresponding to the egress router according to the preset correspondence between the egress router and the service gateway. The target traffic makes the service gateway send the target traffic to the egress router according to the disposal command issued by the gateway management platform for the target traffic, and the traffic cleaning device attached to the egress router cleans the target traffic, and the cleaned traffic is cleaned by the egress router The target traffic is sent to the provincial core network, thus providing a traffic handling method based on the operator's network architecture. Before the user traffic enters the core network, the malicious traffic is pre-analyzed and the malicious traffic is cleaned, which can avoid the bypass of malicious traffic. The protection node of the carrier's SR downlink channel causes the protection to fail.

Description

technical field [0001] The present invention relates to the technical field of communications, in particular to a method, device and system for handling traffic. Background technique [0002] DDoS (Distributed Denial of Service, Distributed Denial of Service) attack is a hacker weapon that can cause large-scale damage. It creates fake traffic to make the attacked server, network link or network device (such as firewall, router) etc.) The load is too high, which eventually causes the system to crash and cannot provide normal services. [0003] In the existing technical solutions, the way to deal with malicious traffic such as DDoS attacks is to deploy special equipment on the protection nodes to prevent the protection nodes from being attacked by malicious traffic. Most of these disposal methods use special equipment to detect, clean and return malicious traffic. Note ability. However, in the prior art, since the protection node is deployed in the downlink channel of the op...

AI Technical Summary

Problems solved by technology

[0005] The present invention provides a method, device and system for handling traffic, which is used to solve the problem in the prior art that the malicious traffic attack protection method of deploying special equipment on the protection node is bypassed by malicious traffic and causes the protection to fail

Images