Ddos mitigation black/white listing based on target feedback
US-2018091547-A1 · Mar 29, 2018 · US
US10484233B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-10484233-B2 |
| Application number | US-201715617150-A |
| Country | US |
| Kind code | B2 |
| Filing date | Jun 8, 2017 |
| Priority date | Jun 8, 2017 |
| Publication date | Nov 19, 2019 |
| Grant date | Nov 19, 2019 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
A virtual provider edge server may include different modules that implement a hybrid provider edge. A flow detection module may sample received traffic through a server and adaptively detect flows to be offloaded. An offloading module may be an SDN controller that controls the flow tables of a switch that data traffic is offloaded to.
Opening claim text (preview).
What is claimed: 1. An apparatus comprising: a processor; and a memory coupled with the processor, the memory storing executable instructions that when executed by the processor cause the processor to effectuate operations comprising: receiving data from a switch during a period; sampling the data during the period; determining a plurality of characteristics associated with the sampled data; based on a first characteristic of the plurality of characteristics reaching a threshold, determining criteria to indicate data to offload through the switch; and based on the determining the criteria to indicate data to offload through the switch, adjusting a data path of the indicated data to bypass the apparatus for subsequent data received at the switch and matching the criteria. 2. The apparatus of claim 1 , wherein the first characteristic comprises a number of times data with a first internet protocol address has been sampled during the period. 3. The apparatus of claim 1 , wherein the criteria comprises an internet protocol address range. 4. The apparatus of claim 1 , wherein the first characteristic comprises a number of times data with a first port number has been sampled during the period. 5. The apparatus of claim 1 , wherein the criteria comprises a time duration to adjust the data path. 6. The apparatus of claim 1 , the operations further comprising periodically sending a request for a statistic associated with a data flow through the switch. 7. The apparatus of claim 1 , the operations further comprising periodically sending a request for a statistic, wherein the statistic comprises a rate of data with a first internet protocol address over a second period. 8. A method comprising: receiving, by a virtual machine, data from a switch during a period; sampling the data during the period; determining a plurality of characteristics associated with the sampled data; based on a first characteristic of the plurality of characteristics reaching a threshold, determining criteria to indicate data to offload through the switch; and based on the determining the criteria to indicate data to offload through the switch, adjusting a data path of the indicated data to bypass the virtual machine for subsequent data received at the switch and matching the criteria. 9. The method of claim 8 , wherein the first characteristic comprises a number of times data with a first internet protocol address has been sampled during the period. 10. The method of claim 8 , wherein the criteria comprises an internet protocol address range. 11. The method of claim 8 , wherein the first characteristic comprises a number of times data with a first port number has been sampled during the period. 12. The method of claim 8 , wherein the criteria comprises a time duration to adjust the data path. 13. The method of claim 8 , further comprising periodically sending a request for a statistic associated with a data flow through the switch. 14. The method of claim 8 , further comprising periodically sending a request for a statistic, wherein the statistic comprises a rate of data with a first internet protocol address over a second period. 15. A computer readable storage medium storing computer executable instructions that when executed by a computing device cause said computing device to effectuate operations comprising: receiving, by a virtual machine, data from a switch during a period; sampling the data during the period; determining a plurality of characteristics associated with the sampled data; based on a first characteristic of the plurality of characteristics reaching a threshold, determining criteria to indicate data to offload through the switch; and based on the determining the criteria to indicate data to offload through the switch, adjusting a data path of the indicated data to bypass the virtual machine for subsequent data received at the switch and matching the criteria. 16. The computer readable storage medium of claim 15 , wherein the first characteristic comprises a number of times data with a first internet protocol address has been sampled during the period. 17. The computer readable storage medium of claim 15 , wherein the criteria comprises an internet protocol address range. 18. The computer readable storage medium of claim 15 , wherein the first characteristic comprises a number of times data with a first port number has been sampled during the period. 19. The computer readable storage medium of claim 15 , wherein the criteria comprises a time duration to adjust the data path. 20. The computer readable storage medium of claim 15 , the operations further comprising periodically sending a request for a statistic, wherein the statistic comprises a rate of data with a first internet protocol address over a second period.
Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272) · CPC title
using flow identification · CPC title
Packet rate · CPC title
Threshold monitoring · CPC title
by sampling · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.