DDoS attack prevention method

Abstract

The invention relates to a DDoS attack prevention method. The method comprises the following steps: a channel conversion module arranging a standby switch channel between a normal access client and aservice server, and the IP address of the standby switch channel being in an inactive state during normal access; the channel conversion module respectively distributing respective private keys to thenormal access client and the service server, and also distributing a public key of the service server to the normal access client; when the service server side detects a DDoS attack, the service server side closing an attacked main switch channel, refusing a main channel IP address data request, activating a standby switch channel IP address at the same time, and starting to process data receivedby the standby channel IP address; and after the normal access client receives the return information of the channel conversion module, completing the normal access of the service server. The DDoS attack prevention method provided by the invention is good in protection effect, more accurate and efficient in flow scheduling and capable of effectively ensuring normal user broadband.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method for preventing DDoS attacks. Background technique [0002] With the popularization of network applications, it has brought a lot of convenience to our life and work, but network security is also what we need to focus on, otherwise the network will cause impact or loss to our normal users. The existing technology uses traffic cleaning technology to deal with DDoS Attack traffic is processed. When DDoS attack traffic is detected to attack the business server, illegal traffic is introduced to the traffic processing device or server, and normal access traffic is guided to the business processing server. However, if the traffic of the DDoS attack is extremely large, It will still lead to the congestion of the entire network. The traffic cleaning technology can only process the traffic flowing into the business processing server, and the normal access traffic will sti...

AI Technical Summary

Problems solved by technology

[0002]With the popularization of network applications, it has brought a lot of convenience to our life and work, but network security is also what we need to pay attention to, otherwise the network will give us normal users To cause impact or loss, the existing technology is to process the traffic of DDoS attack through traffic cleaning technology. When the DDoS attack traffic is detected to attack the business server, the illegal traffic is introduced to the traffic processing device or server, and the normal access traffic is guided However, if the traffic of a DDoS attack is extremely large, it will still lead to congestion of the entire network. The traffic cleaning technology can only deal with the traffic flowing into the business processing server. Normal access traffic will still be blocked due to network congestion. affected

Images