ZyXEL Communications OLT2406, User Manual

Page: 719 / 766

Chapter 106 CPU Protection and DDoS
OLT2406 User’s Guide
719
C
HAPTER
106
CPU Protection and DDoS
106.1 CPU Protection Overview
If the OLT receives large numbers of control packets, such as ARP, which are to be processed by the
CPU, the CPU may become overloaded and be unable to handle regular tasks properly.The CPU
protection feature allows you to limit the rate of ARP packets to be delivered to the CPU on a specific
slot and port. This enhances the CPU efficiency and protects against potential DoS attacks or errors from
other networks.
106.2 DDoS Overview
A distributed denial-of-service attack (DDoS attack) is an attempt to make a machine or network
resource unavailable to its intended users. One common method of attack involves saturating the
target machine with external communications requests, so much so that it cannot respond to legitimate
traffic or responds so slowly as to be rendered essentially unavailable. Such attacks usually lead to a
server overload. In general terms, DoS attacks are implemented by either forcing the targeted
computer(s) to reset, or consuming its resources so that it can no longer provide its intended service or
obstructing the communication media between the intended users and the victim so that they can no
longer communicate adequately.