Flow control security protection method based on multi-level self-adjusting speed limit

Abstract

The invention relates to the technical field of security protection, in particular to a traffic control security protection technology based on multi-level self-adjusting speed limit, the technical solution can effectively filter different types of DDoS attack traffic, and ensure DNS access of normal users to the greatest extent. Multi-level self-adjusting rate limit can prevent a certain address segment or query traffic to certain domain names from occupying too many resources, thereby affecting the overall system performance. When there is an abnormal increase in the query traffic of a local IP segment or domain name segment, it may be caused by a DDoS attack, and the defense function can be realized through multi-level speed limit. The packets go through the matrix with the most discarded packets first, which reduces the number of matrices that data goes through as much as possible, thereby saving the overhead of system computing resources.

Description

technical field [0001] The invention relates to the technical field of safety protection, in particular to a traffic control safety protection technology based on multi-level self-adjusting speed limit. Background technique [0002] DNS (Domain Name System) domain name system, as the basic service facility of the Internet, establishes a mapping relationship between domain names and precise IP addresses, enabling users to access websites, applications and services on the Internet. In recent years, with the continuous development of network applications and services, network attacks have become increasingly frequent. The main methods of DNS attacks include: DNS service content is tampered with and DNS servers are attacked by traffic. No matter what kind of attack it is, it will have a relatively large impact on the normal operation of the DNS server and the normal access to the Internet. At present, there are many defense measures against DNS attacks. The methods, characteri...

AI Technical Summary

Problems solved by technology

The domain name speed limit is mainly to prevent the DNS recursive attack of the prefix change, and effectively protect the DNS recursive server, but it cannot prevent the wrong domain name attack against the full hash

[0016] To sum up, various protection technologies have their own limitations, which makes it difficult to achieve effective protection against different types of DDoS attacks against a large number of botnets in the current network environment

At the same time, it may be difficult to accurately trace the source of the attacker in a complex live network environment. Therefore, how to effectively deal with a large number of DDoS attacks running on the full hash domain name on the UDP protocol is a major problem faced by network operators.

Images