Method and system for integration of distributed denial of service attack protection and load balancing

Abstract

The invention discloses a method and system for the integration of distributed denial of service attack protection and load balancing. The method includes the following steps: judging the type of the received message, and distributing the message according to the type of the message Transmission to the protection module corresponding to the type of the message for detection, to obtain the attack message and the normal message; the protection module corresponding to the type of the message filters the attack message or filters the normal message Send to the kernel thread module; the kernel thread module modifies the message according to the type of the message and sends it. The invention integrates the distributed denial-of-service protection function and the load balancing function into the same device, which solves the cost problem caused by a separate protection device, and at the same time, the protection device and the load balancing device can cooperate with each other more efficiently; Balance the copy volume of timed packets to avoid affecting device performance.

Description

technical field [0001] The invention relates to the field of computer communication, in particular to a method and system integrating distributed denial of service attack protection and load balancing. Background technique [0002] Distributed Denial of Service attack (Distributed Denial of Service, DDoS) is currently the most common means of network attack, with the characteristics of simplicity, violence, and good attack effect, and can have a great impact on the service of the attacked target. With the development of the Internet, the current attacks are characterized by larger attack bandwidth and more frequent attacks, and the impact is more and more serious. [0003] DDoS is aimed at destroying the "availability" of the attacked target. This attack method uses the defect of the network service function of the target system or directly consumes its system resources, so that the target system cannot provide normal services. [0004] For nodes, a common protection method...

AI Technical Summary

Problems solved by technology

[0005] However, the problems existing in the existing technology are: (1) the node DDoS protection needs to deploy hardware, which will increase the cost; (2) the independent protection equipment and the load balancing equipment are independent of each other, and the connection state is prone to be inconsistent, so that the protection and There is a problem with traffic processing; (3) There are many processing procedures on the load balancing device, which affects the performance of the overall system

Images