Patent ID: 9055095
Filing Date: 2015-06-09
Classification: H04L

Abstract:
1. A method for a load balancer to detect and mitigate a Denial of Service (DOS) attack directed at one or more tenant addresses, the load balancer being placed in a data path of network data packets being transmitted between one or more sources and the one or more tenant addresses, the method comprising: an act of analyzing one or more performance parameters regarding network data packets received at the load balancer that is placed in the data path, the network data packets being structured so as to be directed to one or more tenant addresses, the one or more performance parameters describing network data packet flow to the one or more tenant addresses; an act of periodically providing an advertised listing of tenant addresses to an edge router or other source of the network data packets, the listing of tenant addresses being used to route the network data packets to the load balancer; an act of detecting, based on the analysis of the one or more performance parameters, that one or more of the tenant addresses is being subjected to a DOS attack; and an act of performing a mitigation operation to isolate the one or more tenant address being subjected to the DOS attack, the mitigation option including an act of omitting the one or more tenant addresses from the advertised listing of tenant addresses for at least a predetermined period of time or until it is determined that the at least one tenant address is no longer subject to the DOS attack.