Methods and systems for controlling traffic on a communication network

摘要

Mechanisms for controlling traffic on a communication network are described. The mechanisms can be implemented, for example, using signaling messages. For example, a receiver can send a permission message to allow the sender to send a given amount of data along a particular path. As another example, a sender can send a query message indicating a volume of data that has been sent since the sender received a permission message. Upon receiving the query message, a receiver (or another device such as a router, etc.) can detect an attack by comparing the volume of data in the query message with the volume of data that has been received by the receiver. Upon detecting an attack, the receiver can drop unauthorized packets or request the sender to use a security protocol (e.g., IPsec AH) when transmitting data packets and/or change the path of the data flow (e.g., using multi-homing).

主权项

1. A method for controlling traffic on a communication network, comprising:
receiving, at a hardware processor in a receiver, a query message for permission to send a data flow to the receiver; sending, using the hardware processor, a permission message from the receiver; receiving, at the hardware processor, a signaling message that indicates a volume of data that has been sent to the receiver; determining, using the hardware processor, that at least one data packet is unauthorized if a volume of data that has been received by the receiver is greater than the volume of data that has been sent to the receiver as indicated in the signaling message; and in response to determining that the at least one data packet is unauthorized, causing the path for sending the data flow to be changed using the hardware processor.