Cloud Signaling enables optimal protection of the Internet data center from availability threats, identifying and mitigating application-layer attacks at the data center edge and volumetric denial of service attacks in the provider cloud. No other vendor is able to offer this comprehensive, automated protection against availability threats to IDC infrastructure.
DDoS Threat to the Data Center
For the second consecutive year, botnet-driven volumetric and application-layer DDoS attacks continue to be the most significant problems facing network operators, according to the Arbor Networks 2010 Worldwide Infrastructure Security Report. In 2010, for the first time, volumetric DDoS attacks topped the 100 Gbps barrier and an alarming 77 percent of respondents detected application-layer attacks. These application-layer attacks are targeting both end customers and network operators’ own critical support services, such as HTTP, Web and domain name system (DNS) services. IDC operators reported that application-layer DDoS attacks are leading to significant outages, increased operational expenditures (OPEX), customer churn and revenue loss. Moreover, enterprises point to the DDoS threat to the data center – the availability of services and data – as one of the biggest obstacles for organizations looking to move to cloud-based infrastructure today.
Cloud Signaling: A Faster, Automated Way to Provide Comprehensive DDoS Mitigation
Cloud Signaling addresses the need for a coordinated response to both aspects of today’s increasingly complex DDoS threat – the magnitude of the largest volumetric attacks and the sophistication of the latest in application-layer denial of service attacks. Working with their Internet service provider (ISP) and managed security services provider (MSSP) customers, Arbor Networks has developed a protocol to facilitate both customer on-premise mitigation of application-layer attacks and upstream mitigation of volumetric attacks in an automated and real-time manner. Arbor customers who utilize Cloud Signaling can offer customers a comprehensive, integrated protection from the data center edge to the service provider cloud.
When a data center operator discovers that they are under a service-disrupting DDoS attack, they can choose to mitigate the attack in the cloud by triggering a signal to upstream infrastructure of their provider’s network. A volumetric DDoS attack congesting the upstream links would immediately diminish or disappear altogether from the data center’s access links and service availability would be protected. IDC customers also benefit from real-time monitoring of the attack mitigation, as well as granular post-mortem reports with details of the attack and the steps taken by the operator to mitigate the attack, keeping them in control and maintaining their expertise in command of the event. The addition of Cloud Signaling into the ISP/MSSP portfolio further strengthens the overall managed DDoS service offering by providing customers with complete DDoS protection from a single dashboard. Cloud Signaling enables the IDC operator to reduce time to mitigation and increase the effectiveness of response against DDoS threats, thus saving the company from major operational expense and preserving the company’s reputation.
Customer quotes supporting Arbor’s Cloud Signaling
“Adversor operates a cloud-based DDoS security service with global reach. To ensure the availability of our customer’s data and services we need to identify and mitigate application-layer attacks at the data center edge and volumetric attacks in the cloud. Arbor’s Cloud Signaling automates this process in an efficient and elegant manner. This combination is a must have for anyone operating a data center today,” said Adversor Managing Director Paul Steadman.
“Colt's information delivery platform has been relying on Arbor Peakflow to detect and mitigate denial of service threats against our and our customers' infrastructure for over five years. Thanks to Cloud Signaling we are expanding our service's capabilities and ensuring the availability of our managed IT and networking solutions,” said COLT’s Network Strategy and Architecture Director Nicolas Fischbach.
“Cloud Signaling is another innovative solution from Arbor Networks that facilitates communication and information sharing in order to solve real world problems, namely, denial of service attacks that threaten the availability of data center resources,” said Telefonica’s Associate Director of Security Services Juan Miguel Velasco Lopez-Urda.
“As one of New Zealand’s largest telecommunications and ISP companies, we’re highly attuned to issues that impact the security and delivery of services to our customers. We operate, as well as provide to our customers, world-class, leading-edge solutions. Preventing DDoS attacks is vital and utilizing Arbor’s Cloud Signaling capabilities demonstrates our commitment to remain a leader. Working together in this way strengthens our ability to ensure a robust network and resistant services. While we have not had any major issues with DDoS attacks, it’s important to remain ahead of the wave. We’re committed to doing that and will assist wherever we can to make the internet a safer place for businesses and consumers,” said TelstraClear head of Business and Government, Andrew Crabb.
For more information on Arbor Networks DDoS Detection & Mitigation Solutions
About Arbor Networks
Arbor Networks, Inc. is a leading provider of network security and management solutions for next-generation data centers and carrier networks, including the vast majority of the world’s Internet service providers and many of the largest enterprise networks in use today. Arbor’s proven network security and management solutions help grow and protect customer networks, businesses and brands. Through its unparalleled, privileged relationships with worldwide service providers and global network operators, Arbor provides unequalled insight into and perspective on Internet security and traffic trends via the Active Threat Level Analysis System (ATLAS'). Representing a unique collaborative effort with 100+ network operators across the globe, ATLAS enables the sharing of real-time security, traffic and routing information that informs numerous business decisions.