利用BGP虚拟下一跳技术实现IP地址快速封堵

Using BGP Virtual Next Hop to Realize IP Addresses Fast Blocking

通过在BGP的路由反射器(RR)把需要封堵的IP地址通过BGP信息向全网发布并携带特定的BGP虚拟下一跳信息,而在IP骨干网的边缘路由器设置该特定虚拟下一跳IP地址的黑洞路由。以至于在IP骨干网的边缘路由器都会自动把访问该需要封堵IP地址的流量丢弃,达到快速封堵IP地址的目的。

By using the BGP route reflector,all IP addresses which need to be blocked are broadcast in the whole network via BGP protocol,and with particular virtual next hop information.Meanwhile,we set up routing black hole for the virtual next hop at the edge routers of IP backbone network.So all of the edge routers would drop all the traffic which towards those IP addresses automatically,and achieve the purpose of fast blocking.