公开(公告)号：US08175098B2

公开(公告)日：2012-05-08

申请号：US12548564

申请日：2009-08-27

Applicant: Suresh Kumar Bhogavilli ,  Glen Stuart Wiley

Inventor： Suresh Kumar Bhogavilli ,  Glen Stuart Wiley

IPC: H04L12/28

CPC classification number: H04L63/1458 ,  H04L45/742

Abstract: A system and method for managing a route cache to reduce the risk of disruption from denial of service attacks. All traffic arriving on a front interface from local (on-link) nodes (e.g., neighbor nodes) can be treated normally. However, for packets arriving from remote (off-link) sources addressed to a given destination IP address, a single, shared route cache entry can be used. The source-address field in this entry can be zeroed-out since it will not be used for traffic coming from any one source. Similarly, for all packets going to off-link destinations through the front-interface, another single shared route cache entry can be created and used. The destination-address field in this entry can be zeroed out since it will not be used for traffic going to any one destination.

Abstract translation: 一种用于管理路由缓存以减少来自拒绝服务攻击的中断风险的系统和方法。 从本地（在线）节点（例如邻居节点）到达前端接口的所有流量都可以正常处理。 然而，对于从寻址到给定目的地IP地址的远程（非链路）源到达的分组，可以使用单个共享路由高速缓存条目。 该条目中的源地址字段可以被清零，因为它不会用于来自任何一个源的流量。 类似地，对于通过前端接口去链路目的地的所有数据包，可以创建和使用另一个单独的共享路由缓存条目。 此条目中的目标地址字段可以清零，因为它不会用于到任何一个目的地的流量。

公开(公告)号：US20110051728A1

公开(公告)日：2011-03-03

申请号：US12548564

申请日：2009-08-27

Applicant: Suresh Kumar Bhogavilli ,  Glen Stuart Wiley

Inventor： Suresh Kumar Bhogavilli ,  Glen Stuart Wiley

IPC: H04L12/56

CPC classification number: H04L63/1458 ,  H04L45/742

Abstract: A system and method for managing a route cache to reduce the risk of disruption from denial of service attacks. All traffic arriving on a front interface from local (on-link) nodes (e.g., neighbor nodes) can be treated normally. However, for packets arriving from remote (off-link) sources addressed to a given destination IP address, a single, shared route cache entry can be used. The source-address field in this entry can be zeroed-out since it will not be used for traffic coming from any one source. Similarly, for all packets going to off-link destinations through the front-interface, another single shared route cache entry can be created and used. The destination-address field in this entry can be zeroed out since it will not be used for traffic going to any one destination.

Abstract translation: 一种用于管理路由缓存以减少来自拒绝服务攻击的中断风险的系统和方法。 从本地（在线）节点（例如邻居节点）到达前端接口的所有流量都可以正常处理。 然而，对于从寻址到给定目的地IP地址的远程（非链路）源到达的分组，可以使用单个共享路由高速缓存条目。 该条目中的源地址字段可以被清零，因为它不会用于来自任何一个源的流量。 类似地，对于通过前端接口去链路目的地的所有数据包，可以创建和使用另一个单独的共享路由缓存条目。 此条目中的目标地址字段可以清零，因为它不会用于到任何一个目的地的流量。