Denial of service mitigation with two-tier hash

One or more tangible, non-transitory computer-readable mediums having stored thereon instructions for providing a node within a distributed network function, the instructions to instruct a processor to:

• communicatively couple to at least one other peer node of the distributed network function;
• receive an incoming network packet and perform on the incoming network packet a first-level hash of a two-level hash, the first level hash being a lightweight hash with respect to a second-level hash, the first level hash to deterministically direct a packet to one of the nodes as a directed packet;
• and
• receive notification of a DoS attack, identify a DoS packet via the first-level hash, and prevent the DoS packet from reaching the second-level hash.

A computer-implemented method of providing a node within a distributed network function, comprising:

• communicatively coupling to at least one other peer node of the distributed network function;
• receiving an incoming network packet and perform on the incoming network packet a first-level hash of a two-level hash, the first level hash being a lightweight hash with respect to a second-level hash, the first level hash to deterministically direct a packet to one of the nodes as a directed packet;
• and
• receiving notification of a DoS attack;
• identifying a DoS packet via the first-level hash;
• and
• prevent the DoS packet from reaching the second-level hash.