Managing traffic control in a network mitigating DDOS
View Patent ↗Embodiments are provided for managing routes of data traffic within a network. The management may be performed via a graphical user interface that interacts with a Web server to update a configuration file. The configuration file can be converted to router management commands by a network management device (e.g., a BGP speaker). The commands can then be sent to a border routers for controlling network traffic. Embodiments are also provided for capturing and logging routing updates made in a network.
1. A method of managing routes of data traffic within a network, the method comprising performing, by a computer system:
providing a user interface for a user to input a destination address and a routing action, wherein the user interface provides a plurality of routing actions from which to select, wherein the plurality of routing actions includes a discarding routing action to be performed at the plurality of border routers, a null routing action separate from the discarding routing action, and a diversion routing action that specifies a computing device within the network that is not a destination address where the computing device filters network traffic to mitigate denial of service attacks on the destination address based on rules;
receiving a first destination address and a first routing action via the user interface;
receiving, via the user interface, a future time for which the first routing action is to be used; and
upon reaching the future time:
updating a configuration file to specify the first routing action to be performed for the destination address;
converting the configuration file into router management commands; and
sending the router management commands to a plurality of border routers of the network.
2. The method of claim 1 , wherein updating the configuration file includes adding the first destination address to the configuration file.
3. The method of claim 1 , wherein updating the configuration file includes changing a previous routing action for the first destination address to be the first routing action.
4. The method of claim 1 , wherein the computer system is a server.
5. The method of claim 4 , wherein the router management commands are Border Gateway Protocol (BGP) commands, and wherein the server acts as BGP speaker.
6. The method of claim 1 , wherein the user interface is provided by the server setting the user interface to a client device.
7. The method of claim 1 , wherein the computer system includes a server in a transmitting device, wherein the transmitting device converts the configuration file and sends the router management command.
8. The method of claim 1 , further comprising:
forwarding one or more router management commands from the plurality of border routers to one or more other routers based on the first routing action.
9. The method of claim 1 , wherein the first destination address specifies a range of addresses.
10. The method of claim 1 , wherein the user interface displays a list of destination addresses and an associated routing action.
11. The method of claim 10 , wherein the user interface provides selection objects for editing or deleting the destination address of list.
12. The method of claim 10 , wherein the user interface provides selection object to add a border router to which the router management commands are sent.
13. The method of claim 10 , wherein the user interface displays a time associated with each destination address on the list.
14. The method of claim 13 , wherein the time corresponds to how long the current routing action has been performed for each destination address on the list.
15. The method of claim 1 , further comprising:
receiving a first source address corresponding to the first destination address, the first source address designated as a good address; and
adding the first source address to the configuration file, wherein the router management commands specify that network traffic from the first source address is to be sent to the first destination address for any routing action.
16. The method of claim 1 , further comprising:
receiving, via the user interface, a future time for which the first routing action is to end and a previous routing action is to be used;
identifying with future time is reached;
subsequent to the identification, updating the configuration file to specify the previous routing action is be performed for the destination address;
converting the configuration file into new router management commands;
sending the new router management commands.