DDOS defense method and system based on fault automatic migration system

Abstract

The present invention relates to the technical field of network security and in particular to a DDOS defense method and system based on a fault automatic migration system, wherein the DDOS defense method includes: determining whether each VIP address in a VIP cluster is attacked by DDOS during domain name resolution; if so, discarding the VIP addresses attacked by the DDOS, and guiding the trafficto the VIP addresses that are not attacked; and if not, uniformly guiding the traffic to each VIP address in the VIP cluster. The technical solution of the present invention realizes the avoidance ofattack traffic by the automatic migration. An attacker generally attacks the VIPs, and the DDOS attacked VIPs are automatically discarded, and the normal traffic is guided to other VIPs that are notattacked, thereby preventing the server from being attacked, solving the problem of DDOS attack, and greatly reducing the cost and the difficulty of use.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a DDOS defense method and system based on a fault automatic migration system. Background technique [0002] With the popularization and development of Internet applications, everyone pays more and more attention to user experience, so there are many DDOS (Distributed Denial of Service Attack) products on the market. At present, high-defense IP is generally used, followed by a powerful processing cluster. The cluster analyzes the traffic, adopts technologies such as human-computer identification and anomaly detection, to clean and filter the traffic, and only allows legitimate traffic. Traffic is shielded or discarded to protect against DDOS. The disadvantages of existing DDOS protection methods are obvious: [0003] High cost: Purchasing professional DDOS protection services costs tens of thousands of yuan per month, and hundreds of thousands of dollars a year, which i...

AI Technical Summary

Problems solved by technology

[0003] High cost: Purchasing professional DDOS protection services costs tens of thousands of yuan per month, and hundreds of thousands of yuan a year, which is overwhelming for small and medium-sized companies and start-up companies

[0004] Low performance: The general practice in the industry is to clean and filter traffic, but this adds an additional layer of processing, which consumes an additional layer of time, which will eventually affect the service response time and user experience.

[0005] There will be misjudgments: DDOS protection generally has technologies such as human-machine identification and anomaly detection. Although the technology is relatively mature, there are still misjudgments and blocking access by some real users, which will cause some real users to be accidentally injured and affect user experience.

Images