Network Traffic Data Scrubbing With Services Offered via Anycasted Addresses

摘要

Novel tools and techniques for filtering network traffic in an anycasting environment includes receiving network traffic addressed to a plurality of anycasted servers at an edge router, the plurality of anycasted servers comprising one or more anycasted servers. The network traffic is received from the edge server at least one data scrubbing appliance. The at least one data scrubbing appliance filters out undesirable traffic from the network traffic. The at least one data scrubbing appliance “on-ramps” the filtered network traffic to the plurality of anycasted servers. The filtered network traffic is transmitted to the plurality of anycasted servers in a load balanced manner.

主权项

1. A method, comprising:
receiving, at an edge router, network traffic addressed a first anycast address assigned to a plurality of anycasted servers, the plurality of anycasted servers comprising one or more anycasted servers; forwarding, from the edge router, the traffic to a second anycast address assigned to each of one or more data scrubbing appliances in at least one data scrubbing appliance network; receiving, with at least one data scrubbing appliance, the network traffic from the edge router; filtering, with the at least one data scrubbing appliance, undesirable traffic from the network traffic; transmitting the filtered network traffic from the at least one data scrubbing appliance to the plurality of anycasted servers; and load balancing the filtered network traffic to the plurality of anycasted servers.