WO2004090741A3 - Selective diversion and injection of communication traffic - Google Patents

Selective diversion and injection of communication traffic Download PDF

Info

Publication number
WO2004090741A3
WO2004090741A3 PCT/IL2004/000318 IL2004000318W WO2004090741A3 WO 2004090741 A3 WO2004090741 A3 WO 2004090741A3 IL 2004000318 W IL2004000318 W IL 2004000318W WO 2004090741 A3 WO2004090741 A3 WO 2004090741A3
Authority
WO
WIPO (PCT)
Prior art keywords
port
router
packets
injection
traffic
Prior art date
Application number
PCT/IL2004/000318
Other languages
French (fr)
Other versions
WO2004090741A2 (en
Inventor
Barr Anat Bremler
Hank Nussbacher
Roi Hermoni
Dan Touitou
Original Assignee
Riverhead Networks Inc
Barr Anat Bremler
Hank Nussbacher
Roi Hermoni
Dan Touitou
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US09/929,877 external-priority patent/US7707305B2/en
Application filed by Riverhead Networks Inc, Barr Anat Bremler, Hank Nussbacher, Roi Hermoni, Dan Touitou filed Critical Riverhead Networks Inc
Priority to CA002520496A priority Critical patent/CA2520496C/en
Priority to AU2004227600A priority patent/AU2004227600B2/en
Priority to EP04726605.1A priority patent/EP1616269B1/en
Publication of WO2004090741A2 publication Critical patent/WO2004090741A2/en
Publication of WO2004090741A3 publication Critical patent/WO2004090741A3/en
Priority to HK07100084.0A priority patent/HK1093570A1/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1458—Denial of Service
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/02—Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0272—Virtual private networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1491—Countermeasures against malicious traffic using deception as countermeasure, e.g. honeypots, honeynets, decoys or entrapment

Abstract

ABSTRACT A method for communication includes coupling a first port (35) of a Layer-3 packet router (28) to receive communication traffic from a network (26), the traffic including packets destined for a target address (30), which is accessible via a second port (39,41) of the router. At the router, the packets that are destined for the target address are diverted to a traffic processor (22) via a third port (37) of the router. The diverted packets are processed at the traffic processor, and returning the processed packets to the router via the third port. At the router, the processed packets are conveyed from the third port to the second port for delivery to the target address. 2
PCT/IL2004/000318 2001-08-14 2004-04-08 Selective diversion and injection of communication traffic WO2004090741A2 (en)

Priority Applications (4)

Application Number Priority Date Filing Date Title
CA002520496A CA2520496C (en) 2003-04-09 2004-04-08 Selective diversion and injection of communication traffic
AU2004227600A AU2004227600B2 (en) 2003-04-09 2004-04-08 Selective diversion and injection of communication traffic
EP04726605.1A EP1616269B1 (en) 2003-04-09 2004-04-08 Selective diversion and injection of communication traffic
HK07100084.0A HK1093570A1 (en) 2003-04-09 2007-01-04 Method and apparatus for selective diversion and injection of communication traffic

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
US09/929,877 US7707305B2 (en) 2000-10-17 2001-08-14 Methods and apparatus for protecting against overload conditions on nodes of a distributed network
US46139003P 2003-04-09 2003-04-09
US60/461,390 2003-04-09

Publications (2)

Publication Number Publication Date
WO2004090741A2 WO2004090741A2 (en) 2004-10-21
WO2004090741A3 true WO2004090741A3 (en) 2004-11-18

Family

ID=33436703

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/IL2004/000318 WO2004090741A2 (en) 2001-08-14 2004-04-08 Selective diversion and injection of communication traffic

Country Status (1)

Country Link
WO (1) WO2004090741A2 (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10148618B2 (en) 2016-06-07 2018-12-04 Abb Schweiz Ag Network isolation
US11757928B2 (en) 2019-09-17 2023-09-12 Equinix, Inc. Distributed denial-of-service mitigation

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6567380B1 (en) * 1999-06-30 2003-05-20 Cisco Technology, Inc. Technique for selective routing updates
US6598034B1 (en) * 1999-09-21 2003-07-22 Infineon Technologies North America Corp. Rule based IP data processing
US6778495B1 (en) * 2000-05-17 2004-08-17 Cisco Technology, Inc. Combining multilink and IP per-destination load balancing over a multilink bundle

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7707305B2 (en) 2000-10-17 2010-04-27 Cisco Technology, Inc. Methods and apparatus for protecting against overload conditions on nodes of a distributed network

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6567380B1 (en) * 1999-06-30 2003-05-20 Cisco Technology, Inc. Technique for selective routing updates
US6598034B1 (en) * 1999-09-21 2003-07-22 Infineon Technologies North America Corp. Rule based IP data processing
US6778495B1 (en) * 2000-05-17 2004-08-17 Cisco Technology, Inc. Combining multilink and IP per-destination load balancing over a multilink bundle

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP1616269A4 *

Also Published As

Publication number Publication date
WO2004090741A2 (en) 2004-10-21

Similar Documents

Publication Publication Date Title
WO2003073626A3 (en) Method and process for signaling, communication and administration of networked objects
EP1189411A3 (en) Packet transfer scheme using mobile terminal and router for preventing attacks using global address
WO2002056525A3 (en) Technique for forwarding multi-cast data packets
WO2002087160A3 (en) Heterogeneous mobile radio system
WO2002056618A3 (en) Methods and systems for routing messages in a radio access network
WO2007047343A3 (en) Selectively ordered protocol for unreliable channels
WO2003009539A1 (en) Mobile machine communication system and communication method
WO2003019840A3 (en) Multicast transmission in packet based cellular networks
WO2001048983A3 (en) System and process for high-availability, direct, flexible and scalable switching of data packets in broadband networks
AU2565200A (en) Network arrangement for communication
WO2011087603A3 (en) Decoupled cascaded mixers architecture and related methods
WO2006014590A3 (en) A network device architecture for centralized packet processing
WO2002045317A3 (en) Network access system including a programmable access device having distributed service control
WO2000030313A3 (en) Managing internet protocol connection oriented services
CA2379630A1 (en) Method of communications routing
EP2640008A3 (en) Personal virtual bridged local area networks
EP0993152A3 (en) Switching device with multistage queuing scheme
AU5987599A (en) Intelligent network services in packet-switched network
WO2008054952A3 (en) Method and apparatus for providing network based end-device protection
EP1158493A3 (en) Concealing packet losses in a Voice of IP (VOIP) tranmission
EP1320226A3 (en) Router, terminal apparatus, communication system and routing method
WO2000079794A3 (en) Method for delivery of narrow-cast data over digital broadcast channels
TW200623812A (en) Method and system for a gigabit ethernet ip telephone chip
AU2001271171A1 (en) Call routing method for 3g.ip networks
WO2006055339A3 (en) System and method for integrated distribution of broadband services

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SY TJ TM TN TR TT TZ UA UG UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): BW GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LU MC NL PL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
DPEN Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed from 20040101)
WWE Wipo information: entry into national phase

Ref document number: 2520496

Country of ref document: CA

WWE Wipo information: entry into national phase

Ref document number: 20048085080

Country of ref document: CN

WWE Wipo information: entry into national phase

Ref document number: 2004227600

Country of ref document: AU

WWE Wipo information: entry into national phase

Ref document number: 2004726605

Country of ref document: EP

ENP Entry into the national phase

Ref document number: 2004227600

Country of ref document: AU

Date of ref document: 20040408

Kind code of ref document: A

WWP Wipo information: published in national office

Ref document number: 2004227600

Country of ref document: AU

WWP Wipo information: published in national office

Ref document number: 2004726605

Country of ref document: EP