EARLY-WARNING DECISION METHOD, NODE AND SUB-SYSTEM

摘要

Early-warning decision method, node and system are provided in the present application. The method includes the following operations: obtaining a flow analysis result of a portion of service requests that are targeted at a same server; calculating a flow quantity of all the service requests that are targeted at the server based on a flow indicated by the flow analysis result and a weight of a current distributed node, the weight being a weight of all the service requests that are targeted at the server that accounts for the flow quantity indicated by the flow analysis result that is obtained by the current distributed node; comparing a flow quantity of all the service requests that are targeted at the server with an abnormal flow threshold; and determining whether to send an instruction for performing subsequent processing on the server based on a comparison result. The reliability and the security of a DDoS early-warning decision system are improved based on the solutions of the present application.