Minimizing pathological flooding of a network

• US 8,228,794 B2
• Filed: 02/03/2010
• Issued: 07/24/2012
• Est. Priority Date: 02/03/2010
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Yalagandula, Praveen, Mudigonda, Jayaram
• Primary Examiner(s): Jung, Min
• Application Number:
  US12/699,616
• Publication Number:
  US 20110188372A1
• Time in Patent Office: 902 Days
• Field of Search: None
• US Class Current: 370/230
• CPC Class Codes: H04L 12/56 Packet switching systems
• CPC Class Codes: H04L 45/32 Flooding denial of service attacks H04L63/1458
• CPC Class Codes: H04L 47/32 by discarding or delaying data units, e.g. packets or frames

Abstract

In a method for minimizing pathological flooding of a network using a destination node, a packet is received from a source node at the destination node. The packet is transmitted from the source node to the destination node along a path. A determination is made by a node whether the packet indicates a possibility of pathological flooding. In response to a determination that the packet indicates a possibility of pathological flooding, a dummy packet is forwarded along the path to the source node.

Claims

1. A method for minimizing pathological flooding of a network using a destination node, said method comprising:

receiving a packet from a source node at the destination node, wherein the packet is transmitted from the source node to the destination node along a path;

determining, by a node in the network, whether pathological flooding is operable to occur for future packets sent from the source node to the destination node; and

in response to a determination that the pathological flooding is operable to occur, sending a dummy packet along the path to the source node.

2. The method according to claim 1, wherein determining whether pathological flooding is operable to occur for future packets comprises:

determining whether the destination node has not sent packets to the source node within a predetermined period.

3. The method according to claim 1, wherein determining whether pathological flooding is operable to occur for future packets comprises:

determining whether ti−

tj is greater than a threshold T, wherein ti is a time of receipt of the packet from the source node, tj is a time a packet was sent to the source node, and T is a predetermined period based on a minimum forwarding entry timeout for the intermediate nodes.

4. The method according to claim 1, further comprising:

updating ti and updating tj at the destination node after sending the dummy packet.

5. The method according to claim 1, wherein the source node is a source end host and the destination node is a destination end host.

6. The method according to claim 1, wherein the source node is an edge switch source node associated with a source end host and the destination node is an edge switch destination node associated with a destination end host.

7. The method according to claim 6, further comprising:

determining a source address of the source edge switch associated with the source end host.

8. The method according to claim 1, wherein sending the dummy packet comprises unicasting or broadcasting the dummy packet over the network.

9. The method according to claim 1, wherein the source address includes a media access control (MAC) address.

10. The method according to claim 9, wherein the source address further includes a virtual local area network identification (VLAN id).

11. The method according to claim 1, wherein the dummy packet includes a variable in a header and the source is configured to drop the dummy packet having the variable in the header.

12. A system for minimizing pathological flooding of a network, said system comprising:

a processor configured to,

receive a packet from a source node at a destination node, wherein the packet is transmitted from the source node to the destination node along a path,

determine whether pathological flooding is operable to occur for future packets sent from the source node to the destination node, and

forward a dummy packet along the path to the source node in response to a determination by the destination node that the packet indicates a possibility of pathological flooding; and

a storage device configured to store information used to determine whether pathological flooding is operable to occur for future packets sent from the source node to the destination node.

13. The system of claim 12, wherein the destination node is configured to:

determine whether ti−

tj is greater than a threshold T, wherein ti and tj are include in the stored information and ti is a time of receipt of the packet from the source node, tj is a time a packet was sent to the source node, and T is a predetermined period based on a minimum forwarding entry timeout for the intermediate nodes, to determine whether pathological flooding is operable to occur for future packets sent from the source node to the destination node.

14. The system of claim 12, wherein the source node is a source end host and the destination node is a destination end host.

15. The system of claim 12, wherein the source node is an edge switch source node connected to a source end host and the destination node is an edge switch destination node connected to a destination end host.

16. The system of claim 15, wherein further:

the destination node is configured to determine a source address of the first edge switch associated with the first end host.

17. The system of claim 12, wherein the destination node is configured to forward the dummy packet by unicasting or broadcasting the dummy packet over the network.

18. A computer readable storage device on which is embedded one or more computer programs, said one or more computer programs, when executed by a computer system, implementing a method of minimizing pathological flooding of a network using a destination node, said one or more computer programs comprising a set of instructions for:

receiving a packet from a source node at the destination node, wherein the packet is transmitted from the source node to the destination node along a path;

determining by a node whether pathological flooding is operable to occur for future packets sent from the source node to the destination node; and

in response to a determination that pathological flooding is operable to occur for future packets sent from the source node to the destination node, forwarding a dummy packet along the path to the source node.

19. The computer readable storage device according to claim 18, wherein determining whether pathological flooding is operable to occur for future packets comprises:

determining whether the destination node has not sent packets to the source node within a predetermined period.

20. The computer readable storage device according to claim 18, wherein determining whether pathological flooding is operable to occur for future packets comprises:

determining whether ti−

tj is greater than a threshold T, wherein ti is a time of receipt of the packet from the source node, tj is a time a packet was sent to the source node, and T is a predetermined period based on a minimum forwarding entry timeout for the intermediate nodes.