Progressive and distributed regulation of selected network traffic destined for a network node

Abstract

An apparatus is equipped to receive network traffic data for network traffic routed through a number of routing devices with one or more degrees of separation from a network node. The network traffic data include at least network traffic data for network traffic destined for the network node which meet a traffic type selection criteria and are routed by the routing devices to the network node. The apparatus is further equipped to progressively regulate and de-regulate network traffic routing by the routing devices based at least in part on the received network traffic data and the degrees of separation of the routing devices from the network node. Regulation extends from routing devices with the lowest degree of separation from the network node to routing devices with the highest degree of separation, following in the reverse direction of the routing paths traversed by the packets to reach the network node. In one embodiment, the extension or push back is made one degree of separation at a time. In one embodiment, deregulation follows the reverse path, whereas in another embodiment, deregulation is determined and implemented locally, whenever regulation or the extent of regulation is no longer needed. In one embodiment, regulation is made in accordance with a not-to-exceed profile, and the not-to-exceed limit or limits are divided up as regulation extends away from the network node.

1 - 26 . (cancelled)  
   
   
       27 . A method comprising: 
 receiving network traffic data b) reports including network traffic type information, for network traffic routed through a plurality of routing devices and destined for a network node; and    regulating network traffic routing, in response to a denial of service attack on said network node, by network traffic type by said routing devices based at least in part on said received network traffic reports and said network traffic type information.    
   
   
       28 . The method of  claim 27 , wherein said regulating comprises determining if routing of network traffic of a network traffic type by said routing devices needs: needs to be regulated; or, if regulation is already in progress, needs a change in the regulation.  
   
   
       29 . The method of  claim 27 , wherein said regulating comprises regulating said routing devices through at least a selected one of bandwidth allocation, rate limiting, traffic re-prioritization, and re-routing.  
   
   
       30 . The method of  claim 27 , wherein the method further comprises de-regulating network traffic routing by network traffic types by said routing devices based at least in part on said received network traffic data by network traffic types.  
   
   
       31 . The method of  claim 30 , wherein said de-regulating comprises determining if regulation imposed on routing of network traffic of a network traffic type by said routing devices needs to be de-regulated.  
   
   
       32 . The method of  claim 30 , wherein said de-regulation comprises de-regulating at least a selected one of bandwidth allocation, rate limiting, traffic re-prioritization, and re-routing regulation imposed.  
   
   
       33 . The method of  claim 27 , wherein said regulating of network traffic routing by network traffic type by said routing devices is to be performed further based on a desired not-to-exceed profile of network traffic by network traffic type to be routed to said network node.  
   
   
       34 - 46 . (cancelled)  
   
   
       47 . An apparatus comprising: 
 (a) storage medium having stored therein a plurality of programming instructions designed to enable the apparatus to receive network traffic data by network traffic types for network traffic routed through a plurality of routing devices, including at least network traffic data by network traffic types for network traffic destined for a network node routed by said routing devices to said network node; and to regulate network traffic routing by network traffic types by said routing devices based at least in part on said received network traffic data by network traffic types; and    (b) at least one processor coupled the storage medium to execute the programming instructions.    
   
   
       48 . The apparatus of  claim 47 , wherein said programming instructions enable the apparatus to determine if routing of network traffic of a network traffic type by said routing devices needs: needs to be regulated; or, if regulation is already in progress, needs a change in the regulation.  
   
   
       49 . The apparatus of  claim 47 , wherein said programming instructions enable the apparatus to regulate said routing devices through at least a selected one of bandwidth allocation, rate limiting, traffic re-prioritization, and re-routing.  
   
   
       50 . The apparatus of  claim 47 , wherein said programming instructions further enable the apparatus to de-regulate network traffic routing by network traffic types by said routing devices based at least in part on said received network traffic data by network traffic types.  
   
   
       51 . The apparatus of  claim 50 , wherein said programming instructions enable the apparatus to determine if regulation imposed on routing of network traffic of a network traffic type by said routing devices needs to be de-regulated.  
   
   
       52 . The apparatus of  claim 50 , wherein said programming instructions enable the apparatus to de-regulate at least a selected one of bandwidth allocation, rate limiting, traffic re-prioritization, and re-routing regulation imposed.  
   
   
       53 . The apparatus of  claim 47 , wherein said programming instructions enable the apparatus to further base said regulating of network traffic routing by network traffic type by said routing devices on a desired not-to-exceed profile of network traffic by network traffic type to be routed to said network node.