Design And Implementation Of DDoS Profect Sysytem For IMMCC Internet

With the development of internet technology, such as internet data center, data line, broadband services on metropolitan area network, the proportion of data communications business in all communications business has gradually increased. The service quality of data communications business will directly affect the overall service image of the operator. IMMCC (Inner Mongolia Mobile Communications Corporation) operated publice internet (CMNet in short) carrying a series of important business including TD/GPRS/WLAN, own-data-services, IDC, group/ordinary customers internet access business, online business hall, etc.. Due to the network’s openness, DDoS attacks, hacking and other external threats are increasingly serious threat, if the CMNet network export no security measures, it is not able to make rapid response and defense to DDoS attacks and other abnormal network traffic, due to the impact of these abnormal traffic, the corresponding network equipment and business systems will not work normally. In order to achieve defense of DDoS attack, filter the huge DDoS attack traffic precisely, reduce or eliminate the pressure on the network equipment and service system and portect the CMNet safety is the aims of the paper.This paper aims at according to the CMNet’s security situation, select the appropriate professional products, from the source of attack, traffic analysis, traffic cleaning, unified management, defense process, system security and other aspects to design the best security measuers development scheme for CMNet to defense DDoS.