US 2006/0077964 A1 · Methods and systems for automatic denial of service protection in an IP device

Abstract

Methods and systems for automatic denial of service protection in an IP device are disclosed. Packets are received at a network interface of an IP device, the packets being addressed to a network address of the network interface. The packets addressed to the network interface of the IP device are forwarded to a processor in the IP device. The processor determines whether the packets violate a rate-based policing policy of the IP device. In response to determining that the packets violate the rate-based policing policy, source identifying information associated with the packets is added to an access control list in the IP device. Packets matching criteria in the access control list are prevented from being forwarded to the processor in the IP device.

Claims37

Dependent claims

A method for automatic denial of service protection in an IP device, the method comprising:

(a) receiving packets at a network interface of an IP device, the packets being addressed to a network address of the network interface;
(b) forwarding the packets addressed to the network interface of the IP device to a processor in the IP device;
(c) at the processor, determining whether the packets violate a rate-based policing policy of the IP device;
and
(d) in response to determining that the packets violate the rate-based policing policy, adding source identifying information associated with the packets to an access control list in the IP device;
and
(e) preventing packets matching criteria in the access control list from being forwarded to the processor in the IP device.

4 more elements

Dependencies are inferred from the claim text.

Methods and systems for automatic denial of service protection in an IP device

Life of this patent

Methods and systems for automatic denial of service protection in an IP device

Life of this patent

Abstract

Claims37