Patent ID: 11916876
Assignee: ARBOR NETWORKS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 17:
18. A non-transitory computer-readable storage medium storing executable instructions that, when executed by one or more processors, cause the one or more processors to monitor network traffic for a protected network using a block of internet protocol (IP) addresses assigned to one or more protected servers, the instructions causing the one or more processors to:
select one or more green addresses, wherein each green address is a different IP address from the block of IP addresses and corresponds to a fixed green path that provides a route to the one or more protected servers;
receive a first packet of the network traffic from a client directed to an IP address of the block of IP addresses, the first packet including a source address for the client and a destination address from the block of IP addresses, wherein the first packet is received prior to any performance of deep packet inspection on the first packet in association with monitoring the network traffic for the protected network;
responsive to determining that the destination address matches the one or more green addresses, transmit the first packet to the one or more protected servers via the fixed green path, bypassing any deep packet inspection;
receive a second packet of the network traffic subsequent to receiving the first packet of the network traffic; and
responsive to determining a time interval has ended or responsive to detecting a trigger event, transmit the second packet to a scrubber instead of transmitting the second packet via the green path despite determining a destination IP address of the second packet matches the one or more green addresses, wherein the scrubber is configured to analyze the second packet using deep packet inspection.