Chapter 23. Using CAR to Control Attacks

This chapter covers the following key topics:

  • Overview of Committed Access Rate— This section gives a brief overview of how CAR works.

  • Using CAR to Drop Excessive Malicious Traffic— This section discusses how CAR is used to drop traffic which is in the form of a flood.

  • Case Study: Using CAR to Limit DDoS Attacks— This case study will look at how CAR can be utilized to limit traffic which may constitute a denial of service attack.

Committed Access Rate (CAR), like NBAR, is basically a quality of service (QoS) feature borrowed for use in security implementations. However, it can be a very effective tool in controlling denial of service (DoS) attacks where it is not possible to completely segregate malicious ...

Get Network Security Principles and Practices now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.