Traffic attack protection method and system, controller, router, and storage medium

A controller, comprising:

• one or more memories;
• and one or more processors coupled to the one or more memories, wherein the one or more processors are configured to:
• establish neighbor relationships with border routers at a plurality of traffic entrances;
• receive an attack protection request sent by an intrusion detection system (IDS) a first traffic entrance, the first traffic entrance being at any one of the plurality of traffic entrances, and the attack protection request carrying a target network address that has been attacked, wherein the attack protection request includes a traffic cleaning request or a traffic blocking request, and wherein the step to receive includes:
• in response to determining by the IDS that traffic corresponding to the target network address is less than a preset threshold, obtaining from the IDS, by the controller, the traffic cleaning request;
• and
• in response to determining by the IDS that the traffic corresponding to the target network address is not less than a preset threshold, obtaining from the IDS, by the controller, the traffic blocking request;
• generate routing information based on the attack protection request, the routing information comprising the target network address and routing address information;
• and send the routing information to a first border router based on the neighbor relationship, so that the first border router performs, based on the routing address information, protection processing on the traffic that corresponds to the target network address, the first border router being a border router at the first traffic entrance at which the intrusion detection system that sends the attack protection request is located.

A border router, comprising:

• one or more memories;
• and one or more processors coupled to the one or more memories, wherein the one or more processors are configured to:
• establish a neighbor relationship with a controller, the controller having neighbor relationships with a plurality of the border routers at a plurality of traffic entrances;
• receive, based on the neighbor relationship, routing information that is sent by the controller, the routing information including routing address information and a target network address that has been attacked, wherein the routing information has been generated by the controller based on an attack protection request sent by an intrusion detection system (IDS) at a first traffic entrance, the first traffic entrance being any one of the plurality of traffic entrances, and the attack protection request carrying the target network address that has been attacked, wherein the attack protection request includes a traffic cleaning request or a traffic blocking request, and wherein
• in response to determining by the IDS that traffic corresponding to the target network address is less than a preset threshold, the control obtains from the IDS the traffic cleaning request, and
• in response to determining by the IDS that the traffic corresponding to the target network address is not less than a preset threshold, the control obtains from the IDS the traffic blocking request;
• and
• perform, based on the routing information, protection processing on the traffic that corresponds to the target network address.