Ddos attack detection and mitigation method for industrial sdn network
US-2021092153-A1 · Mar 25, 2021 · US
US11483261B2 · US · B2
| Field | Value |
|---|---|
| Publication number | US-11483261-B2 |
| Application number | US-202017014670-A |
| Country | US |
| Kind code | B2 |
| Filing date | Sep 8, 2020 |
| Priority date | Apr 9, 2018 |
| Publication date | Oct 25, 2022 |
| Grant date | Oct 25, 2022 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Embodiments of the present invention disclose a data packet processing method and apparatus, and a device. The method includes: if a first data packet is received, determining a first cache queue that is in the first buffer and that is used to store the first data packet; buffering the first data packet in the second buffer if a state of the first cache queue is an invalid state, where a data amount of the first data packet is less than the capacity of the second buffer, and the state of the first cache queue is set to the invalid state when a current data amount of the first buffer reaches the capacity of the first buffer; and if a data amount of the second buffer reaches the capacity of the second buffer, sending all data packets that are in the second buffer to a control plane device.
Opening claim text (preview).
What is claimed is: 1. A data packet processing method, wherein the method is applied in a forwarding plane device, the forwarding plane device comprises a first buffer and a second buffer, the first buffer comprises at least one cache queue, and the method comprises: when a first data packet is received, determining a first cache queue that is in the first buffer and that is used to store the first data packet; buffering the first data packet in the second buffer when a state of the first cache queue is an invalid state, wherein a data amount of the first data packet is less than a capacity of the second buffer, and the state of the first cache queue is set to the invalid state when a current data amount of the first buffer reaches a capacity of the first buffer; when a data amount of the second buffer reaches the capacity of the second buffer, sending all data packets that are in the second buffer to a control plane device, and thereafter: receiving a forwarding flow table sent by the control plane device, wherein the forwarding flow table is generated by the control plane device in response to all the data packets that are in the second buffer and that are sent by the forwarding plane device; receiving a second data packet; and buffering the second data packet in the second buffer in response to the forwarding flow table when a data identifier of the second data packet matches a data identifier of any data packet in the first cache queue. 2. The method according to claim 1 , wherein the method further comprises: receiving a third data packet; determining that a cache queue used to store the third data packet does not exist in the first buffer, and that the data amount of the first buffer reaches the capacity of the first buffer; sending the third data packet to the control plane device; receiving a processing flow table sent by the control plane device, wherein the processing flow table is generated by the control plane device in response to the third data packet; deleting the first cache queue when a current data amount of the first cache queue is zero; establishing, in the first buffer and in response to the processing flow table, a second cache queue used to store the third data packet; and buffering the third data packet in the second cache queue. 3. The method according to claim 2 , wherein before the establishing, in the first buffer and in response to the processing flow table, a second cache queue used to store the third data packet, the method further comprises: deleting the forwarding flow table. 4. The method according to claim 1 , wherein the method further comprises: sending a first notification message to the control plane device when the current data amount of the first cache queue is zero, wherein the first notification message is used to notify the control plane device that the current data amount of the first cache queue is zero; receiving a second notification message sent by the control plane device, wherein the second notification message is generated after the control plane device forwards all data packets that are buffered in the control plane device and whose data identifiers each match a data identifier of the first data packet; and deleting the forwarding flow table in response to the second notification message. 5. A data packet processing method, applied in a control plane device, the method comprising: receiving all data packets that are sent by a forwarding plane device and that are from a second buffer of the forwarding plane device; buffering, in a third buffer, the received data packets that are from the second buffer, wherein the third buffer corresponds to the second buffer, receiving a third data packet sent by the forwarding plane device, wherein the third data packet is forwarded when a cache queue used to store the third data packet does not exist in a first buffer of the forwarding plane device, and when a data amount of the first buffer reaches a capacity of the first buffer; generating a processing flow table in response to the third data packet and sending the processing flow table to the forwarding plane device. 6. The method according to claim 5 , wherein the method further comprises: generating a forwarding flow table in response to the received data packets that are from the second buffer; and sending the forwarding flow table to the forwarding plane device. 7. A data packet processing method, applied in a control plane device, the method comprising: receiving all data packets that are sent by a forwarding plane device and that are from a second buffer of the forwarding plane device; buffering, in a third buffer, the received data packets that are from the second buffer, wherein the third buffer corresponds to the second buffer; generating a forwarding flow table in response to the received data packets that are from the second buffer; and sending the forwarding flow table to the forwarding plane device; receiving a first notification message sent by the forwarding plane device; determining, based on the first notification message, that a current data amount of a first cache queue of the forwarding plane device is zero; forwarding all data packets that are in the third buffer to the forwarding plane device; and sending a second notification message to the control plane device, wherein the second notification message is used to notify the forwarding plane device that a current data amount of the third buffer is zero. 8. A data packet processing apparatus, wherein the apparatus is included in a forwarding plane device, the forwarding plane device comprises a first buffer and a second buffer, the first buffer comprises at least one cache queue, and the apparatus comprises: a processor, configured to: when a first data packet is received, determine a first cache queue that is in the first buffer and that is used to store the first data packet; a cache, configured to buffer the first data packet in the second buffer when a state of the first cache queue is an invalid state, wherein a data amount of the first data packet is less than a capacity of the second buffer, and the state of the first cache queue is set to the invalid state when a current data amount of the first buffer reaches a capacity of the first buffer; a sending module, configured to: when a data amount of the second buffer reaches the capacity of the second buffer, send all data packets that are in the second buffer to a control plane device, a first receiving module, configured to receive a forwarding flow table sent by the control plane device, wherein the forwarding flow table is generated by the control plane device in response to all the data packets that are in the second buffer and that are sent by the forwarding plane device; the first receiving module is further configured to receive a second data packet and the cache is further configured to buffer the second data packet in the second buffer in response to the forwarding flow table if a data identifier of the second data packet matches a data identifier of any data packet in the first cache queue. 9. The apparatus according to claim 8 , wherein a second receiving module is configured to receive a third data packet; the processor is further configured to determine that a cache queue used to store the third data packet does not exist in the first buffer, and that the data amount of the first buffer reaches the capacity of the first buffer; the sending module is further configured to send the third data packet to the control plane device; the second receiving module further receives a processing flow table sent by the control plane device, wherein the processing flow table is generated by the control plane device in
including multiple buffers, e.g. buffer pools · CPC title
Reaction in network · CPC title
Route cache; Operation thereof · CPC title
Centralised routing · CPC title
Reactions to storage capacity overflow · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.