METHODS AND SYSTEMS FOR AUTOMATIC DENIAL OF SERVICE PROTECTION IN AN IP DEVICE

摘要

Methods and systems for automatic denial of service protection in an IP device are disclosed. Packets are received at a network interface of an IP device, the packets being addressed to a network address of the network interface. The packets addressed to the network interface of the IP device are forwarded to a processor in the IP device. The processor determines whether the packets violate a rate-based policing policy of the IP device. In response to determining that the packets violate the rate-based policing policy, source identifying information associated with the packets is added to an access control list in the IP device. Packets matching criteria in the access control list are prevented from being forwarded to the processor in the IP device.