Back to results
US 2025/0097254 A1Published application
Flowspec gateway
AssigneeLevel 3 Communications, LLC
InventorsMichael Feldpusch, Christian Jensen, Lisa Harenski, William Hoxworth
Life of this patent
Estimating the term…
Abstract
FlowSpec is a mechanism for distributing rules to routers in a network. Such rules may be used, for example, to drop traffic associated with a distributed denial of service attack. However, a malformed or incorrect FlowSpec announcement may, if distributed in the network, cause legitimate traffic to be dropped, degrading the service experienced by legitimate users. As such, systems and methods for avoiding the distribution of malformed FlowSpec announcements are provided.
Claims19
A method, comprising:
- receiving a first FlowSpec announcement;
- determining that the first FlowSpec announcement passes an acceptability test;
- and
- in response to determining that the first FlowSpec announcement passes the acceptability test, forwarding the first FlowSpec announcement to a router,
- wherein the determining that the first FlowSpec announcement passes the acceptability test comprises determining that a rate limit field of the first FlowSpec announcement has a value less than a set maximum permissible rate limit.
2 more elements
A system, comprising:
- a FlowSpec gateway, the FlowSpec gateway comprising a processing circuit and memory storing instructions that, when executed by the processing circuit, cause the FlowSpec gateway to perform a set of operations comprising:
- receiving a FlowSpec announcement;
- determining that the FlowSpec announcement passes an acceptability test;
- and
- in response to determining that the FlowSpec announcement passes the acceptability test, forwarding the FlowSpec announcement to a first router,
- wherein the determining that the first FlowSpec announcement passes the acceptability test comprises determining that a rate limit field of the first FlowSpec announcement has a value less than a set maximum permissible rate limit.
3 more elements
Dependencies are inferred from the claim text.