System and method for location, time-of-day, and quality-of-service based prioritized access control
A priority server for a provider network includes a traffic volume detection module, a traffic analyzer module, and a rules module. The traffic volume detection module receives operational information from the provider network and determines that a host is experiencing a flash event based upon the operational information. The traffic analyzer module determines that the flash event is not a distributed denial of service attack on the host. When it is determined that the flash event is not a distributed denial of service attack, the rules module provides a priority rule to an access router that is coupled to the host.
1. A priority server for a provider network, comprising:
a memory that stores instructions;
a processor that executes the instructions to perform operations, the operations comprising:
receiving operational information from the provider network;
determining that a host on the provider network is experiencing a flash event based upon the operational information;
determining that the flash event is not a distributed denial of service attack on the host; and
providing a priority rule to an access router in the provider network that is coupled to the host in response to determining that the flash event is not a distributed denial of service attack.
2. The priority server of claim 1 , wherein a characteristic of packets routed in the provider network that are associated with the flash event includes a geographic location that is a source of the packets, and wherein the priority rule is based upon the characteristic.
3. The priority server of claim 1 , wherein a characteristic of packets routed in the provider network that are associated with the flash event includes a time at which the packets entered the provider network, and wherein the priority rule is based upon the characteristic.
4. The priority server of claim 3 , wherein the time includes a time zone.
5. The priority server of claim 3 , wherein the time includes a range of times.
6. The priority server of claim 1 , wherein a characteristic of packets routed in the provider network that are associated with the flash event includes a port of the host that is a target of the packets, and wherein the priority rule is based upon the characteristic.
7. The priority server of claim 1 , wherein a characteristic of packets routed in the provider network that are associated with the flash event includes a particular network protocol that is associated with the packets, and wherein the priority rule is based upon the characteristic.
8. A method of prioritizing traffic in a provider network, comprising:
receiving, at a server, operational information from the provider network;
determining, by utilizing instructions from memory that are executed by a processor of the server, that a host on the provider network is experiencing a flash event based upon the operational information;
determining that the flash event is not a distributed denial of service attack on the host; and
in response to determining that the flash event is not a distributed denial of service attack, providing a priority rule to an access router in the provider network that is coupled to the host, wherein the priority rule is based upon a characteristic of packets routed in the provider network that are associated with the flash event.
9. The method of claim 8 , wherein the characteristic includes a geographic location that is a source of the packets.
10. The method of claim 8 , wherein the characteristic includes a time at which the packets entered the provider network.
11. The method of claim 10 , wherein the time includes a time zone.
12. The method of claim 11 , wherein the time includes a range of times.
13. The method of claim 8 wherein the characteristic includes a port of the host that is a target of the packets.
14. The method of claim 8 , wherein the characteristic includes a particular network protocol that is associated with the packets.
15. A computer-readable device for managing prioritized access rules, wherein the computer-readable device includes instructions, which when loaded and executed by a processor, cause the processor to perform operations comprising:
receiving operational information from a provider network;
determining that a host on the provider network is experiencing a flash event based upon the operational information;
determining that the flash event is not a distributed denial of service attack on the host; and
in response to determining that the flash event is not a distributed denial of service attack, providing a priority rule to an access router in the provider network that is coupled to the host.
16. The computer-readable device of claim 15 , wherein the characteristic includes a geographic location that is a source of the packets.
17. The computer-readable device of claim 15 , wherein the characteristic includes a time at which the packets entered the provider network.
18. The computer-readable device of claim 17 , wherein the time includes a time zone.
19. The computer-readable device of claim 15 , wherein the characteristic includes a port of the host that is a target of the packets.
20. The computer-readable device of claim 15 , wherein the characteristic includes a particular network protocol that is associated with the packets.