关键词: 多数据中心, 感知, 安全服务链, 负载均衡

Abstract: As DDoS attacks occur frequently in multi-data center and existing DDoS attack eliminating methods cannot avoid the interference to legitimate traffic, this paper proposes a DDoS attack elimination strategy for multi-data center, based on service function chaining and traffic awareness technology. By deploying the perception component to the entrance of data center, which detects abnormal data traffic, and interacts with controller, the controller will put the work of attack eliminating in the scrubbing domain, which is outside the data center, thus avoiding interference to legitimate data traffic. At the same time, a load balancing algorithm is proposed for the scrubbing domain to ensure stable processing capability when serving multi-data center. This paper builds a prototype to verify the feasibility of the strategy through experiments.

Key words: multi-data center, awareness, security service chain, load balancing