DDoS Shield
Thursday, May 7, 2009 at 2:46AM Last week, one of my clients had multiple DDOS attacks, such as Syn-flood, UDP network attacks, and HTTP get floods at rates of 90K to 700K packets per second. DDos and http get attacks was so large that it shut down their web-servers which resulted in a complete network outage for several days. Once we were notified of the problem, the facility manager, Mike Mazzei and our Engineer, Payam TarverdyanChychi, initiated our DDos Shield service to mitigate their traffic. Our DDos Shield utilizes the latest bleeding edge technology devices which is made up of multiple vendors.
Our DDos Shield uses high end ASIC boards to process/analyze the packetswhich decreases latency when new devises are introduced into the mesh.This allows the security devices to scrub the packets to determine goodvs bad packets based not only on signatures but also behavioral aspectsand sourced based filtering. In a severe attack (over 200KPPS ordepending on how large the traffic rate is) our DDoS Shield will workwith our Cisco/Juniper Routers to distribute traffic over several of our upstream providers to allow multiple ingress points for the attack and as such reduces the changes of saturating any given transit or transport. Once the distributed mode has been activated, all traffic will beautomatically routed within the peer1 backbone and sent to designated locations designed to handle attacks upwards of 10 Million packets/second up to 5gigs/sce. This number will drastically increase in the weeks to come.
This customer operates a social networking site that was enabled during these attacks. Once on our DDoS Shield service he was back up after initiating the service. If you would like more information regarding our DDoS Shield or any of our services you can contact me at woody@globalcoloquote or 917-710-5226.