US 2021/0084067 A1 · SCALABLE DDOS SCRUBBING ARCHITECTURE IN A TELECOMMUNICATIONS NETWORK

Abstract

Aspects of the present disclosure involve systems, methods, computer program products, and the like, for an orchestrator device associated with a scrubbing environment of a telecommunications network that receives one or more announced routing protocol advertisements from a customer device under an attack. In response to receiving the announcement, the orchestrator may configure one or more scrubbing devices of the network to begin providing the scrubbing service to packets matching the received routing announcement. A scrubbing service state for the customer may also be obtained or determined by the orchestrator. With the received route announcement and the customer profile and state information, the orchestrator may provide instructions to configure the scrubbing devices of the network based on the received information to dynamically automate scrubbing techniques without the need for a network administrator to manually configure the scrubbing environment or devices.

Claims20

Dependent claims

A method for providing a scrubbing service from a network, the method comprising:

receiving, in response to a denial of service attack on a device of a telecommunications network, routing information associated with the device and through a first routing protocol announcement session, the routing information comprising an Internet Protocol (IP) address associated with the device;
associating the IP address with a customer profile of a scrubbing environment of the telecommunications network, the scrubbing environment providing traffic scrubbing services to the customer of the telecommunications network;
and
transmitting, to a scrubbing device of the scrubbing environment and in response to the received routing information for the device of the telecommunications network, an instruction to add the IP address to a list of scrubbed IP addresses of the scrubbing device through the first routing protocol announcement session.

1 more element

An orchestrator device of a scrubbing environment of a telecommunications network, the orchestrator comprising:

at least one communication port receiving routing information through a first routing protocol announcement in response to a detected denial of service attack on the device, the routing information comprising at least one Internet Protocol (IP) address associated with a device of the telecommunications network;
a processing device;
and
a computer-readable medium connected to the processing device configured to store information and instructions that, when executed by the processing device, performs the operations of:
associating the at least one IP address with a customer profile of the scrubbing environment of the telecommunications network, the scrubbing environment providing traffic scrubbing services to the customer of the telecommunications network;
obtaining a customer scrubbing state of the scrubbing environment based at least on the customer profile of the scrubbing environment, the customer scrubbing state comprising an indication of a stored scrubbing state for the IP address associated with the device;
and
transmitting one or more instructions to the scrubbing environment to add the at least one IP address to a list of scrubbed IP addresses of at least one scrubbing device of the scrubbing environment in response to the received routing information for the device of the telecommunications network through the first routing protocol announcement.

5 more elements

Dependencies are inferred from the claim text.

Scalable ddos scrubbing architecture in a telecommunications network

Life of this patent

Scalable ddos scrubbing architecture in a telecommunications network

Life of this patent

Abstract

Claims20