Denial of service defense by proxy
View Patent ↗A method for defending a host, which is coupled to the Internet via a defensive firewall/router, against a denial of service attack, comprises periodically determining the status of the host; storing the status of the host; receiving at the defensive firewall/router a request from an entity on the Internet for service from the host; and responding to the entity in accordance with the stored status. The period that is set is not related to the request.
1. A method for defending a host, which is coupled to the Internet via a defensive firewall/router, against a denial of service attack, comprising:
periodically determining the status of the host;
storing the status of the host at the defensive firewall/router, wherein said host status is indicative of a host availability;
receiving at the defensive firewall/router a request from an entity on the Internet for service from the host; and
replying to the entity by the defensive firewall/router by transmitting the stored status to the entity,
whereby the defensive firewall/router acts as a proxy to defend the host against a denial of service attack.
2. The method of claim 1 , wherein the host is a host server.
3. The method of claim 1 , wherein the host is an address on a local network.
4. The method of claim 1 , wherein the status includes a response rate.
5. The method of claim 1 , wherein the status includes error indications.
6. A method for defending a host, which is coupled to the Internet via a defensive firewall/router, against a synchronize/start (SYN) flooding attack, comprising:
periodically determining the status of the host;
storing the status of the host at the defensive firewall/router, wherein said host status is indicative of a host availability;
receiving a SYN packet from an entity on the Internet at the defensive firewall/router; and
replying to the SYN packet by the defensive firewall/router by transmitting the stored status to the entity, whereby if the stored status is favorable, the defensive firewall/router enters a pending connection state with the entity,
whereby the defensive firewall/router acts as a proxy to defend the host against a denial of service attack.
7. The method of claim 6 , further comprising the step of: initiating a tinier upon said reply.
8. The method of claim 7 , further comprising the step of: determining whether said timer has reached a predetermined limit.
9. The method of claim 8 further comprising the step of: determining whether an error has occurred in response to said reply.
10. The method of claim 9 , further comprising the step of: clearing the pending connection state if either an error has occurred or said predetermined limit has been reached.
11. The method of claim 10 , further comprising the step of attempting to establish a thee-way connection between said defensive firewall/router, said host and said external server.
12. The method of claim 11 , further comprising the step of clearing the pending connection state if said attempt fails.
13. The method of claim 11 , further comprising the step of sending reset packets from said defensive firewall/router to said host and external server if said attempt fails.