Dynamic Blackhole Policy

The blackhole policy is dynamically triggered based on real-time statistics about traffic destined to a specific IP address.

Context

The dynamic blackhole policy is triggered based on the alarm severity of the blackhole and whether the second-level blackhole is enabled.

When the dynamic blackhole policy is automatically decapsulated and the value of Scheduled unblocking time defined in the blackhole API is reached, the blackhole policy is disabled and the blackhole task is deleted.

Procedure

  1. Set the blackhole mode of the Zone.

    In this case, the blackhole mode must be set to Automatic.

    1. Choose Defense > Policy Settings > Zone.
    2. Click of the Zone.
    3. In the Defense Policy dialog box, configure a blackhole policy. Table 1 lists related parameters.
      Table 1 Blackhole parameter configuration

      Parameter

      Description

      Black hole mode

      Select Automatic.

    4. Click OK.

Copyright © Huawei Technologies Co., Ltd.