Volumetric distributed denial of service attack mitigation

A system comprising one or more network traffic management modules, a memory comprising programmed instructions stored thereon, and one or more processors configured to be capable of executing the stored programmed instructions to:

• receive a first request to establish a first network connection using a first network traffic management module, wherein the first network traffic management module executes after an allocation of resources for establishing the first network connection;
• determine, using the first network traffic management module, that the first request is from a potential bad actor;
• generate, using the first network traffic management module, an identifier using the first request, wherein the identifier comprises a source network address of the first request and an additional identifier based on contents of the first request;
• store, using the first network traffic management module, the identifier in a list of potential bad actor identifiers;
• receive a second request to establish a second network connection using second a network traffic management module, wherein the second network traffic management module executes before an allocation of resources for establishing the second network connection;
• generate, using the second network traffic management module, the identifier using the second request;
• determine, using the second network traffic management module, that the identifier is in the list of potential bad actor identifiers;
• and
• based on the determining:
• drop the second request, and
• prevent the resources for establishing the second network connection from being allocated.

A non-transitory computer readable medium having stored thereon instructions comprising executable code that, when executed by one or more processors, causes the processors to:

• receive a first request to establish a first network connection using a first network traffic management module, wherein the first network traffic management module executes after an allocation of resources for establishing the first network connection;
• determine, using the first network traffic management module, that the first request is from a potential bad actor;
• generate, using the first network traffic management module, an identifier using the first request, wherein the identifier comprises a source network address of the first request and an additional identifier based on contents of the first request;
• store, using the first network traffic management module, the identifier in a list of potential bad actor identifiers;
• receive a second request to establish a second network connection using a second network traffic management module, wherein the second network traffic management module executes before an allocation of resources for establishing the second network connection;
• generate, using the second network traffic management module, the identifier using the second request;
• determine, using the second network traffic management module, that the identifier is in the list of potential bad actor identifiers;
• and
• based on the determining:
• drop the second request, and
• prevent the resources for establishing the second network connection from being allocated.

A network traffic management apparatus, comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:

• receive a first request to establish a first network connection using a first network traffic management module, wherein the first network traffic management module executes after an allocation of resources for establishing the first network connection;
• determine, using the first network traffic management module, that the first request is from a potential bad actor;
• generate, using the first network traffic management module, an identifier using the first request, wherein the identifier comprises a source network address of the first request and an additional identifier based on contents of the first request;
• store, using the first network traffic management module, the identifier generated using the first request in a list of potential bad actor identifiers;
• receive a second request to establish a second network connection using a second network traffic management module, wherein the second network traffic management module executes before an allocation of resources for establishing the second network connection;
• generate the identifier, using the second network traffic management module, using the second request;
• determine, using the second network traffic management module, that the identifier is in the list of potential bad actor identifiers;
• and
• based on the determining:
• drop the second request, and
• prevent the resources for establishing the second network connection from being allocated.