Centertrack: an IP overlay network for tracking DoS floods

摘要: Finding the source of forged Internet Protocol (IP) datagrams in a large, high-speed network is difficult due to design IP protocol and lack sufficient capability most high-speed, high-capacity router implementations. Typically, not enough routers such are capable performing packet forwarding diagnostics required for this. As result, tracking-down flood-type denial-of-service (DoS) attack usually or impossible these networks. CenterTrack an overlay network, consisting tunnels other connections, that used selectively reroute interesting directly from edge special tracking routers. The routers, associated sniffers, can easily determine ingress by observing which tunnel arrive. be examined, then dropped forwarded appropriate egress point. This system simplifies work adjacency flood while bypassing any equipment may incapable necessary diagnostic functions.