Communication control apparatus, communication control method and communication control program product

Abstract

A communication control apparatus includes: a storage device, an input device, an output device, a communication control apparatus, a main storage device and a processor (CPU). The CPU includes an address segmentation unit, a weight detector and a connection controller. The address segmentation unit splits a received packet, the weight detector detects the weight of each segment of the packet, and the connection controller employs the weight to provide connection control for the packet.

1 . A method for controlling a communication by a server, the method comprising:
 storing corresponding weighted values for each of a plurality of predetermined portions of a sender address assigned to a connection request packet received from a communication apparatus connected to the server via a network, the weighted values determined based on a number of packets received from the communication apparatus during a predetermined time period, the connection request packet including a connection request to the server from the communication apparatus;   receiving the connection request packet;   obtaining a weighted value corresponding to one of the predetermined portions of the sender address assigned to the received connection request packet from among the stored weighted values;   rejecting the connection request, when the obtained weighted value exceeds a predetermined value, by determining that the communication apparatus consumes more than a predetermined amount of a resource of the server and discarding the connection request packet;   allowing the connection request, when the obtained weighted value falls within a predetermined range that is lower than the predetermined value;   updating the stored weighted values by adding an additional weight calculated by a predetermined calculation to the obtained weighted value; and   transmitting a connection response packet to the communication apparatus when the connection request is allowed.   
   
   
       2 . The method according to  claim 1 , wherein
 the sender address is an IPv6 address, and   the predetermined portion of the sender address is a part or all of a network prefix.   
   
   
       3 . The method according to  claim 1 , wherein the connection request is allowed when the connection request packet is determined to be a valid connection request. 
   
   
       4 . The method according to  claim 1 , further comprising:
 storing a history of the weighted values;   updating the stored weighted values by adjusting the obtained weighted value to increase or to decrease in accordance with the history of the weighted values, and   determining to reject or allow the connection request based on the obtained weighted value to be adjusted.   
   
   
       5 . The method according to  claim 1 , wherein the additional weight to be added to the obtained weighted value is calculated by a hash process. 
   
   
       6 . The method according to  claim 1 , further comprising performing a constant service process for the communication apparatus.