Route configuration method, apparatus and device, and computer readable storage medium

Abstract

The invention provides a routing configuration method, which comprises the following steps of: configuring at least one routing list, so that the same routing list contains at least one routing entry, and the at least one routing entry is routing information of historical attack traffic for executing the same control strategy; and configuring a respective corresponding control strategy for the at least one routing list, and sending the configured control strategy to a second network device, the second network device being used for controlling the received target attack traffic according to the configured control strategy. Visibly, the routing information of the historical attack traffic executing the same control strategy is configured in the same routing list, so that the routing classification is realized, the control strategy does not need to be configured for each routing, and only the control strategy needs to be configured for each routing list, so that the configuration amount can be effectively reduced, and network resources are saved.

Description

technical field [0001] The present application relates to the field of communication technology, and in particular to a routing configuration method, device, equipment and computer-readable storage medium. Background technique [0002] With the continuous expansion of network scale, denial of service (Denial of Service, referred to as DoS) / distributed denial of service (Distributed Denial of Service, referred to as DDoS) attack is a major threat to network security, DoS / DDoS attackers through multiple The control terminal controls tens of thousands of attacking devices to launch traffic attacks on the same destination address, network segment or server at the same time, resulting in network congestion or high occupation of the central processing unit (CPU) of the server, unable to provide services. Border Gateway Protocol (BGP) Flowspec uses the BGP network layer reachability information type defined by the standard protocol to transmit traffic filtering information, so ro...

AI Technical Summary

Problems solved by technology

Although the existing solutions can filter and control attack traffic, when multiple attack traffic needs to be configured with the same control policy, the command of the match keyword statement is to match different traffic, but the set keyword statement is the same In this way, as many match keyword statements are configured, as many set keyword statements with repeated content need to be configured, thus wasting network resources

Images