Flow Record Restriction Apparatus for Network Congestion Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In communication systems using flow technologies like NetFlow and IPFIX, increased flow due to attack traffic leads to congestion in measurement networks, or results in incomplete information transmission due to buffer overflow when congestion control protocols are used.
Innovation Solution
A Flow Record restriction apparatus that generates, manages, and transmits Flow Records, aggregating less important records when the buffer limit is exceeded to maintain a predetermined number, preventing congestion and buffer overflow.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If the number of Flow Records is increased to capture complete traffic information, then measurement precision is improved, but network congestion occurs and buffer overflow happens
Solution Approach 1:
The patent changes the parameter of Flow Record quantity from unlimited to limited (predetermined number). The flow transmission apparatus controls the number of Flow Records to be transmitted to not exceed a predetermined threshold, thereby preventing network congestion while maintaining essential traffic monitoring capabilities
Solution Approach 2:
The patent applies partial action by transmitting only a predetermined number of Flow Records rather than all generated records. This selective transmission prevents buffer overflow and network congestion while still providing sufficient traffic information for measurement purposes
2Loss of information
If all generated Flow Records are transmitted to measurement terminal, then information completeness is improved, but internal buffer overflow occurs when using TCP/SCTP with congestion control
Solution Approach 1:
The patent applies preliminary action by controlling the number of Flow Records before they enter the transmission buffer. The flow transmission apparatus limits the number of Flow Records to be transmitted to not exceed a predetermined number, preventing buffer overflow before it occurs
Solution Approach 2:
The patent changes the parameter of Flow Record quantity from unlimited to limited. By controlling the number of Flow Records to be transmitted to not exceed a predetermined threshold, the system prevents internal buffer overflow while maintaining essential traffic monitoring
Data Source
AI summary
A Flow Record restriction apparatus is provided for restricting a transmission number of Flow Records while maintaining measurement information of the whole traffic. The Flow Record restriction apparatus includes: a flow generation unit 202 configured to determine a set of packets having the same attribute to be a flow of the same communication, and to generate a Flow Record based on header information of the packets for each flow; a Flow Record number restriction function unit 203 including a management buffer for temporarily storing generated Flow Records, and being configured to read the Flow Records from the management buffer and output the Flow Records; and a Flow Record transmission unit 204 configured to packetize the output Flow Records to transmit packets over the measurement network, wherein, when a number of Flow Records stored in the management buffer exceeds a preset upper limit value, the Flow Record number restriction function unit 203 aggregates a part of stored Flow Records.