Packet reflection identification in CPE devices
Methods, systems, and apparatus can be used to filter packet reflections. In various implementations, packets received on a subscriber side of a device having a source address identifying a service provider device can be dropped. In other implementations, portions of packets forwarded to a subscriber side of a device can be cached and compared to portions of packets received on a subscriber side of the device.
1. A computer-implemented method, comprising:
receiving an incoming data packet at a first network side of a customer premise equipment device;
extracting a first address associated with origination of the incoming data packet;
determining whether the first address associated with the incoming data packet matches a second address used to originate a previously received data packet at a second network side of the customer premise equipment device; and
dropping the incoming data packet if the first address matches the second address.
2. The computer-implemented method of claim 1 , wherein a wide area network side of the customer premise equipment comprises a hybrid fiber coax network associated with a multiple service operator.
3. The computer-implemented method of claim 1 , wherein the incoming data packet is a reflected data packet when the first address matches the second address.
4. The computer-implemented method of claim 3 , wherein the second address is associated with one or more wide area network servers, including the cable modem termination system, router, quadrature amplitude modulation device, or other headend device.
5. The computer-implemented method of claim 1 , wherein the second address is selected from a plurality of addresses associated with service provider equipment devices.
6. One or more computer-readable media having instructions stored thereon, the one or more computer readable media, when executed by a processor, cause the processor to perform operations comprising:
receiving an incoming data packet from a subscriber equipment side of a customer premise equipment device;
extracting a source media access control (MAC) address associated with the incoming data packet, the origination address identifying a subscriber device that originated the incoming data packet;
determining whether the source MAC address associated with the incoming data packet matches a MAC address of any of one or more devices associated with a service provider side of the customer premise equipment device; and
dropping the incoming data packet if the source MAC address matches the MAC address of any of the one or more service provider devices.
7. The computer readable media of claim 6 , wherein a wide area network side of the customer premise equipment comprises a hybrid fiber coax network associated with a multiple service operator.
8. The computer readable media of claim 6 , wherein the incoming data packet is identified as a reflected data packet when the origination address matches the MAC address of any of the one or more service provider devices.
9. The computer readable media of claim 8 , wherein the MAC addresses of one or more service provider devices are associated with a cable modem termination system.
10. The computer readable media of claim 6 , further comprising identifying the MAC address of one or more service provider devices based upon data packets received from a service provider side of the customer premise equipment device.
11. A computer-implemented method, comprising:
capturing a first portion of provider originated data packets received on a service provider side of a customer premise equipment device;
receiving an incoming subscriber side data packet from a subscriber equipment side of a customer premise equipment device;
extracting a second portion of data from the incoming subscriber side data packet;
determining whether the second portion of data extracted from the subscriber side data packet matches the first portion of data captured from provider originated data packets; and
identifying the incoming subscriber side data packet as a reflected packet if the second portion of data extracted from the subscriber side data packet matches the first portion of data captured from provider originated data packets.
12. The computer-implemented method of claim 11 , wherein the first and second portions comprise an originating address field extracted from a respective data packet.
13. The computer-implemented method of claim 11 , further comprising dropping any incoming subscriber side data packets identified as a reflected packet.
14. The computer-implemented method of claim 11 , further comprising:
storing the first portion of provider originated data packets received on the service provider side of the customer premise equipment device to a provider side reflection identification store; and
refreshing the reflection identification store to remove stale data.
15. The computer-implemented method of claim 14 , wherein refreshing the reflection identification store to remove stale data comprises removing old entries into the reflection identification store responsive to new entries into the reflection identification data store.
16. The computer-implemented method of claim 14 , wherein refreshing the reflection identification store to remove stale data comprises removing entries into the reflection data store that are older than a predetermined age.
17. A computer-implemented method, comprising:
receiving a first data packet at a wide area network side of a customer premise equipment device;
extracting a first address associated with origination of the first data packet;
forwarding the first data packet onto a local area network side of the customer premise equipment device;
receiving a second data packet at the local area network side of the customer premise equipment device;
extracting a second address associated with origination of the second data packet;
determining whether the first address associated with the first data packet matches a second address used to originate the second data packet; and
dropping the incoming data packet if the first address matches the second address.