Health monitor based distributed denial of service attack mitigation
AssigneeA10 Networks, Inc.
InventorsMicheal Thompson, Vernon Richard Groves
Life of this patent
Estimating the term…
Abstract
Provided are methods and systems for mitigating a DDoS event. The method may comprise receiving an indication of a collapse of a collapsible virtual data circuit associated with network data traffic. In response to the received indication of the collapse, the collapse may be attributed to the DDoS event. Furthermore, the method may comprise redirecting the network data traffic to one or more DDoS mitigation services. The method may further comprise mitigating the DDoS event by the one or more DDoS mitigation services.
Claims20
A system for mitigating a DDoS event, the system comprising:
- a hardware processor;
- and
- a memory coupled to the hardware processor, the memory storing instructions executable by the hardware processor, the hardware processor being configured to:
- receive an indication of a collapse of a collapsible virtual data circuit, the collapsible virtual data circuit being designed to collapse in response to the DDoS event;
- and
- based on the indication of the collapse of a collapsible virtual data circuit, redirect network data traffic associated with the collapsible virtual data circuit.
A method for mitigating a DDoS event, the method comprising:
- receiving an indication of a collapse of a collapsible virtual data circuit, the collapsible virtual data circuit being designed to collapse in response to the DDoS event;
- and
- based on the indication of the collapse of a collapsible virtual data circuit, redirecting network data traffic associated with the collapsible virtual data circuit.
A system for mitigating a DDoS event, the system comprising:
- a hardware processor;
- and
- a memory coupled to the hardware processor, the memory storing instructions executable by the hardware processor configured to:
- send a request to a health monitor regarding a state of a network resource, the health monitor associated with a collapsible virtual data circuit that normally conveys the network data traffic and collapses in response to the DDoS event by stopping flow of the network data traffic, wherein the indication of the collapse of the collapsible virtual data circuit is received in response to the request;
- receive an indication of a collapse of the collapsible virtual data circuit, the collapsible virtual data circuit being designed to collapse in response to the DDoS event;
- and
- based on the indication of the collapse of a collapsible virtual data circuit, redirect network data traffic associated with the collapsible virtual data circuit, wherein the redirecting the network data traffic associated with the collapsible virtual data circuit includes:
- redirecting the network data traffic to one or more DDoS mitigation services;
- analyzing the network data traffic by the one or more DDoS mitigation services to detect DDoS data packages;
- and
- filtering the DDoS data packages by the one or more DDoS mitigation services to provide filtered network data traffic.
Dependencies are inferred from the claim text.