The Design and Implementation of a Dynamic IP defense System Accelerated by Vector Packet Processing
Liren Miao, Hongchao Hu, Guozhen Cheng · 2019
IP address dynamic protection techniques will introduce additional overhead. Therefore, the performance of normal network transmission decreases. In order to deal with this problem, we design and implement a dynamic IP address defense system accelerated by Vector Packet Processing (VPP). Using VPP's flexibility and extensibility, we change the packet's IP in the gateway. We derive the dynamic IP strategy profiles based on the optimization analysis, and design the fast and slow forwarding logic based on VPP's graph processing to reduce the overhead. The experimental results show that the system can hide the real IP address and enhance the system's data processing ability effectively. It can also control the potential detection attack hit rate below 5%, which significantly improved compared with existing technologies.