An attack protection method, system, device and storage medium

Abstract

The embodiment of the invention discloses a distributed denial of service attack protection method, system, device and storage medium. The embodiment of the present invention can receive the target route issued by the target protection module, and the target route is generated by the target protection module according to the target address of the distributed denial of service attack; obtain the priority information of the protection module of the currently issued route; according to the priority information, the The target protection module generates a traction path for the end of the path; according to the traction path, the service flow pointing to the target route is drawn to the corresponding protection module for cleaning. Therefore, the solution uses a traction path to connect the multi-layer protection modules in series, which can not only realize the multi-layer defense of distributed denial of service attacks, but also realize the filtering of business traffic through series connection, ensuring the overall function of the distributed denial of service attack protection system The improvement and performance balance have improved the overall protection effect of distributed denial of service attacks.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a distributed denial of service attack protection method, system, device and storage medium. Background technique [0002] With the improvement of network bandwidth, DDoS (Distributed Denial of Service, Distributed Denial of Service) attack traffic has seen a blowout growth. In order to achieve the purpose of the attack, the huge attack traffic will contain a variety of attack methods at the same time, such as: common reflection attack, connection exhaustion attack, CC (Challenge Collapsar, challenge black hole) attack. The traditional protection scheme is mainly to deploy a DDoS defense device at the entrance of the computer room to provide both Layer 4 and Layer 7 protection functions at the network layer. [0003] During the research and practice of the prior art, the inventors of the present invention found that the seven-layer DDoS attack defense usually requ...

AI Technical Summary

Problems solved by technology

When a mixed Layer 4 and Layer 7 DDoS attack occurs, if the same device performs both Layer 4 and Layer 7 DDoS attack defenses, then Layer 7 DDoS attack defense will consume a lot of device performance, and resources available for Layer 4 DDoS attack defense are relatively small. less, which seriously affects the performance of the four-layer DDoS attack defense, resulting in poor DDoS attack defense effect

Images