DDoS prevention method and system based on user level shunting

Abstract

The invention relates to an anti-DDoS method and system based on user level shunting, and the method comprises the steps: obtaining the user level information of a player, and obtaining a domain name corresponding to the user level information in a domain name list; connecting a first gateway node according to a pointing IP of the domain name, and detecting the first gateway node regularly through a gateway detection server; under the condition that a heartbeat timeout signal of the first gateway node is received, selecting a second gateway node from the available gateway node pool to replace the first gateway node, and calling the DNS service to point the pointing IP of the domain name to the second gateway node. Through the application of the method and the device, the problem that the defense capability of related DDoS defense methods is lower due to the fact that available gateway nodes are exposed to the outside in related technologies is solved, and the attack duration and the attack difficulty of attackers are increased, so the defense capability of a DDoS defense system is improved.

Description

Technical field [0001] The present application relates to network security technology, and in particular, there is a method and system for anti-DDoS based on user level shunt. Background technique [0002] Distributed Denial Of Service, referred to as DDoS, refers to multiple attackers in different locations, simultaneously engaged at one or more targets in the server, or an attacker controls multiple points in different Multiple machines in the location and use these machines to implement attacks simultaneously. After being attacked, a large number of attack packets will cause the network bandwidth block, causing normal game packets that are flooded by false game data packages and cannot reach the host, or cause the host's memory being exhausted and the CPU is occupied by the application, so that the network is not available. service. [0003] In the related art, commonly used anti-DDOS methods are as follows: [0004] 1. Increase the network bandwidth, provide sufficient networ...

AI Technical Summary

Problems solved by technology

[0004]1. Increase network bandwidth, provide sufficient network bandwidth to offset a large number of traffic attack packets, and use the remaining bandwidth to provide users with normal services; however, network bandwidth Usually limited, and the cost of increasing network bandwidth is also high;

[0005]2. Clean and filter abnormal traffic through the DDoS hardware firewall. This method can resist some attacks outside the server and reduce the consumption of hardware CPU or memory resources, but it cannot solve the problem of simultaneous The generated attack packets cause network bandwidth congestion;

However, this method will still completely expose the service node and put the server in an unsafe state

[0007] At present, no effective solution has been proposed for the problem of low defense of anti-DDoS methods in related technologies

Images