基于IXP 1200平台的DDoS攻击防御研究

分布式拒绝服务攻击（DDoS）已经成为互联网最大的威胁之一.提出了一种基于Intel IXP1200网络处理器平台的DDoS防御系统的设计方案,并实际实现了一个防御系统D-Fighter.提出了解决DDoS攻击的两个关键技术：数据包认证和细微流量控制的原理和方法,并在D-Fighter中设计实现.经过实际网络测试环境的应用测试表明,D-Fighter达到了设计目标,对DDoS攻击的防御有较好的效果.

The Aproach of Defending against DDoS Attack Based on IXP 1200 Platform

Distributed Denial of Service (DDoS) attack is one of the biggest threats to Internet. This article puts forward a designing scheme of defending against DDoS attacks based on the Intel network processor platform--IXP1200, and it has implemented in a practical defense system--D-Fighter. Two key techniques of data packets authentication and granular traffic control for defending against DDoS attacks are proposed and adopted in the design of D-Fighter. At last, the application test in practical network test environment shows that D-Fighter meets the designing requirements and it has a better protective effect against DDoS attacks.