Router purchasing guide for security Internet cafes

With the development of China's routing industry, we have also promoted the update and upgrade of routing technology. Here we mainly explain how to purchase Internet cafe routers. The biggest problem facing internet cafes is the unstable network. It is represented by game cards, dropped connections, slow Internet access, and intermittent video interruption. The reasons for the unstable Internet cafes are as follows.

I. ARP Spoofing

The Internet cafe ARP spoofing virus is said to have originated from the "legend" game account theft. Due to the popularity of the "legend" game, players' virtual items can be traded in cash, the interests drive some people to use ARP spoofing to steal others' legendary accounts. Since then, the ARP spoofing virus has become increasingly rampant and becomes a heart disease for Internet cafe owners.

Ii. DoS attacks on the Intranet and Internet

Due to fierce competition in Internet cafes, some Internet cafes use DoS attack tools to attack competing Internet cafes in order to seize the tourists, leading to paralysis of the router or blockage of the route of the attacked Internet cafe's egress Internet cafe. Due to the public nature of Internet cafes, some malicious attackers directly use the PC of Internet cafes or use Trojans to control the PC of Internet cafes to attack the specified public network target. This attack is very powerful and can directly lead to paralysis of Internet cafe routers or line congestion.

3. bandwidth is preemptible by BT and other applications

In Internet cafes, As long as someone uses download tools such as thunder and BT to download, the egress bandwidth of Internet cafes will be quickly seized, resulting in network congestion. Downloading services such as thunder and BT can resume transmission when the network is congested. However, real-time applications such as games and videos cannot resume transmission at the breakpoint, resulting in card or even communication interruption.

4. Difficult Maintenance

The daily maintenance of Internet cafes is generally the responsibility of Internet cafe network administrators. However, most Internet cafe network administrators, after all, are not very skilled IT professionals. During the daily maintenance process, it is difficult to detect and solve problems in a timely manner. The result is that the fault is constantly expanding and sustained, affecting the normal operation of Internet cafes. Since illness is inevitable, the key is to ensure that the disease can be quickly cured. Therefore, whether the Internet cafe router is easy to maintain, especially whether it can be used quickly and skillfully by the Internet cafe network administrator has become an important factor affecting the stability of the Internet cafe network.

How to Prevent ARP spoofing?

To prevent ARP spoofing, two-way binding is a common practice, that is, binding the MAC address of the gateway on the PC and statically binding the MAC address of the PC on the router of the egress Internet cafe. This approach can prevent some ARP spoofing, but as the ARP spoofing virus becomes more intelligent, this approach has become increasingly inadequate. Bidirectional binding has the following defects:

1. it can only prevent PC-to-Internet communication from being interrupted by ARP spoofing, but the Intranet games between PC and PC cannot be guaranteed, unless the MAC of the entire network PC is bound to all PCs, this is obviously not realistic, because the IP address of the Internet cafe PC may change at any time;

2. Some versions of Windows have vulnerabilities. Static MAC binding is equivalent to virtual settings. You can easily cheat Windows by using ARP packets in some special formats;

3. ARP spoofing is becoming increasingly intelligent. Some variants can directly Delete the MAC static binding of PCs, just as some viruses can disable anti-virus software.

To completely solve ARP spoofing, you must start from the root, that is, prevent ARP spoofing packets from spreading in the network. The solution is to use a switch/Internet cafe router with the anti-ARP spoofing function. Currently, there are only a few security switches/Internet cafe routers that support anti-ARP spoofing on the market. However, the use of security switches/Internet cafe routers to prevent ARP spoofing has become increasingly recognized by Internet cafe owners, such as in Dongguan and Suzhou, many Internet cafes have begun to use ruijie's security switch to prevent ARP spoofing.