Anti-attack method, device and equipment based on congestion dissipation
Patent Information
- Application Number
- CN202611328039.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2026-08-28
- Publication Date
- 2026-10-16
AI Technical Summary
[0003]相关技术下,在进行DDoS攻击防护过程中,可能在短时间内出现海量恶意请求涌向目标服务器,这样使目标服务器在高强度攻击下难以保持业务可用性,同时导致合法请求的延迟累积较长
[0016]In this embodiment, for upstream and downstream nodes of the cleaning domain, a first congestion state of the upstream node and a second congestion state of the downstream node are obtained. The cleaning domain includes multiple cleaning nodes. Based on the first and second congestion states, a congestion wave state is obtained. When the congestion wave state indicates that a congestion wave has formed downstream, peak shaving processing is performed on the first traffic rate of the upstream node to obtain the second traffic rate of the upstream node, so that the upstream node outputs service traffic according to the second traffic rate. The service traffic output by the upstream node is cleaned by multiple cleaning nodes, and the cleaned service traffic is output to the downstream node. Peak shaving processing is performed upstream to effectively suppress the impact of sudden traffic on the downstream cleaning nodes. Through the coordinated scheduling and timing optimization of multiple cleaning nodes, the cleaning effect is combined with user experience optimization, achieving a significant reduction in the latency of legitimate user access while maintaining a high interception rate.