Mitigating neighbor discovery-based denial of service attacks

A method, comprising:

• adding, by a first device in a network, an address to a binding table of the first device;
• generating, by the first device, an address lookup array based in part on the address added to the binding table;
• and
• providing, by the first device, the address lookup array to a second device in the network, wherein the second device is operable to use the address lookup array to determine whether a destination address of a packet received by the second device was not used to generate the address lookup array or was possibly used to generate the address lookup array.

An apparatus, comprising:

• one or more network interfaces to communicate within a computer network;
• a processor coupled to the network interfaces and configured to execute one or more processes;
• and
• a memory configured to store a process executable by the processor, the process when executed operable to:
• add an address to a binding table stored in the memory;
• generate an address lookup array based in part on the address added to the binding table;
• and
• provide the address lookup array to a device in the network, wherein the device is operable to use the address lookup array to determine whether a destination address of a packet received by the device was not used to generate the address lookup array or was possibly used to generate the address lookup array.

A tangible non-transitory computer readable medium storing program instructions that cause a computer to execute a process, the process comprising:

• add an address to a binding table stored in the memory;
• generate an address lookup array based in part on the address added to the binding table;
• and
• provide the address lookup array to a device in the network, wherein the device is operable to use the address lookup array to determine whether a destination address of a packet received by the device was not used to generate the address lookup array or was possibly used to generate the address lookup array.