D-Link DGS-6600-48TS Configuration Guide - Page 450

Volume 8-DoS Protection / Chapter 41-DoS Protection Chapter Overview Chapter 41 DoS Protection Chapter Overview The following topics are included in this chapter, please go to the topic for more detailed information: • Chapter Overview • An Introduction to DoS Protection • DoS Prevention Overview • Architecture • Operation Concepts • Mechanism • Actions • Attack Types • Configuration Examples • Parameters An Introduction to DoS Protection A denial-of-service (DoS) attack is an attempt to make device resource unavailable to its intended users. The DoS attack are usually implemented by consuming resource of device and let device cannot reply to legitimate user or reply slowly. The DoS Prevention gives one solution to recognize well-known DoS attacking pattern and do relating actions. User can configure the device to drop packets to prevent device or other hosts from DoS attack. DoS Prevention Overview Architecture The architecture of DoS is shown as below. There is one local database located in DoS prevention module. The database is used to keep configuration and counters. When the DoS prevention of specific attacking type are enable/disable, the value will be set to hardware chip. There is one counter task in DoS module, the counter task will gather counter from chip every five minutes. If the log action configured, DoS module will add log when counter increased in five minutes. DGS-6600 Configuration Guide 450