Back to results
US 12,756,730 B2Granted
Flood attack defense method and related apparatus
AssigneeHuawei Technologies Co., Ltd.
InventorWan Xue
Life of this patent
Estimating the term…
Abstract
A flood attack defense method and a related apparatus. A first node receives a first packet from a second node. The first packet includes a source IPv6 address of a data packet, and the source IPv6 address of the data packet is a next-hop address in a routing table or a forwarding table of the first node. The first node establishes a first neighbor cache entry. A destination IPv6 address included in the first neighbor cache entry is the source IPv6 address of the data packet.
Claims16
A flood attack defense method, wherein the method comprises:
- receiving, by a first node, a first packet from a second node, wherein the first packet includes a source internet protocol version 6 (IPv6) address of a data packet, and the source IPv6 address of the data packet is a next-hop address in a routing table or a forwarding table of the first node;
- establishing, by the first node, a first neighbor cache table that includes a first neighbor cache entry, wherein a destination IPv6 address included in the first neighbor cache entry is the source IPV6 address of the data packet, wherein the first neighbor cache entry further includes a first MAC address, a first state, and a first aging time, and wherein the first neighbor cache entry further includes a correspondence between the destination IPv6 address and the first MAC address, the first state, and the first aging time;
- and
- based on the first MAC address, determining whether the destination IPv6 address is valid or invalid.
1 more element
An apparatus, comprising:
- a processor;
- and
- a non-transitory computer-readable storage medium storing a program to be executed by the processor to:
- receive a first packet from a second node, wherein the first packet comprises a source internet protocol version 6 IPv6 address of a data packet, and the source IPV6 address of the data packet is a next-hop address in a routing table or a forwarding table of a first node;
- establish a first neighbor cache table that includes a first neighbor cache entry, wherein a destination IPv6 address included in the first neighbor cache entry is the source IPV6 address of the data packet, wherein the first neighbor cache entry further includes a first MAC address, a first state, and a first aging time, and wherein the first neighbor cache entry further includes a correspondence between the destination IPv6 address and the first MAC address, the first state, and the first aging time;
- and
- based on the first MAC address, determine whether the destination IPv6 address is valid or invalid.
4 more elements
Dependencies are inferred from the claim text.