Intelligent quarantine on switch fabric for physical and virtualized infrastructure

A system comprising:

• a switch fabric including a plurality of nodes, wherein each node in the plurality of nodes includes a physical network device, one or more processors, a memory;
• and wherein each node receives traffic to pass into a network environment including a plurality of virtual machines;
• a switch fabric threat remediation agent, and
• wherein the plurality of nodes and the switch fabric threat remediation agent include software instructions, which when executed by one or more processors within the switch fabric cause the system to perform operations including:
• monitoring, at a first node in a switch fabric, data traffic passing into the network environment;
• detecting, at the first node, a traffic pattern indicative of a denial of service (DoS) attack within the monitored data traffic passing into the virtualized network environment,
• generating threat information in response to detecting the traffic pattern indicative of a DoS attack;
• at the first node, using the threat information to prevent transmission of the DoS attack traffic into either or both the virtual machines and one or more hypervisors hosting the virtual machines in the virtualized network environment.

A non-transitory media storing program instructions, which when executed by one or more processors in a system comprising a plurality of nodes organized in a switch fabric, which when executed by one or more processors within the switch fabric cause the system to perform operations including:

• monitoring, at a first node in the switch fabric, data traffic passing into a virtualized network environment;
• detecting, at the first node, a traffic pattern indicative of a denial of service (DoS) attack within the monitored data traffic passing into the virtualized network environment;
• generating threat information in response to detecting the traffic pattern indicative of a DoS attack;
• and
• at the first node, using the threat information to prevent transmission of the DoS attack traffic into at least one hypervisor or virtual machine in the virtualized network environment.