A traffic processing method, device and system

Abstract

The present application discloses a traffic processing method, device and system, which are applied to a system including primary defense equipment and advanced defense equipment, wherein the traffic cleaning capability of the advanced defense equipment is higher than that of the primary defense equipment, the The method includes: the management and control device monitors whether the load of the primary defense device used for cleaning user traffic is greater than a first threshold; if the monitoring result is yes, the management and control device transfers the traffic processed by the primary defense device to the advanced defense device for cleaning; The management and control device controls and transfers the cleaned traffic to the business processing device for processing, so that different defense devices can be selected for traffic cleaning according to the specific situation, which reduces the cost of use. At the same time, this series of operations is performed without the user It is carried out under the condition of perception and does not require the user to perform additional operations. In this way, the user experience is improved by dynamically scheduling the defense equipment.

Description

technical field [0001] The embodiments of the present application relate to the technical field of communications, and in particular, to a traffic processing method, device, and system. Background technique [0002] Such as figure 1 As shown, it is a schematic diagram of a DDoS (Distributed Denial of Service, Distributed Denial of Service) attack. The attacker uses a bot to launch a DDoS attack. The attack causes the resources of the business server to be exhausted, thereby denying the service of normal users; Some defenses include: [0003] 1. DDoS traffic cleaning, which is currently the most commonly used method of defense against DDoS, detects DDoS attacks through DDoS detection equipment and gives an early warning. When a DDoS attack is found, it notifies the bypass traffic cleaning equipment to pull the traffic of the attacked destination IP and clean the attack traffic. Reinject normal flow. [0004] 2. Publish black hole routes on the carrier network, that is, whe...

AI Technical Summary

Problems solved by technology

[0007] Aiming at the defect that high cost and low efficiency cannot be solved in the defense against DDoS in the prior art, thus affecting the normal business of users, this application proposes a traffic processing method, which is applied to a system including primary defense equipment and advanced defense equipment , wherein the traffic cleaning capability of the advanced defense device is higher than that of the primary defense device, the method includes:

Images