A Priority-based Feedback Flow Control System for Bandwidth Control

In this paper, we propose a priority-based feedback flow control system (PFFCS) architecture that use the flow-based network intrusion detection to classify the traffic flows in the network into different priority classes and give different treatment to the flow-rates belonging to different classes, and PFFCS uses a control-theoretic approach to control network traffic and at the same time, adaptively to maximize low priority flows while maintaining high priority flows at a desired level so that full utilization of network medium can be achieved through adaptive rate control. To provide this desired service guarantee to high priority flows, we build dynamic network flow model, propose multi-layered network flow-rate constrain algorithms and define a series of malicious-based packet discarding policies. The system is shown to be highly flexible and robust against different types of attack patterns, and traditional network traffic control can be implemented using one common framework. This system has been evaluated by using simulated test-bed data. Results show the success that the system mitigates distributed denial of service attacks.