Corsa Giga Filter
•
1 like•242 views
Corsa Technology's introduced GigaFilter, a new feature on the Red Armor NSE7000 hardware platform that allows instant filtering of up to 4 Billion IPv4 addresses on 10 Gbps and 100 Gbps links to mitigate volumetric DDoS attacks.
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Corsa Giga Filter
Similar to Corsa Giga Filter (20)
Recently uploaded
Recently uploaded (20)
Corsa Giga Filter
- 1. Universal Network Security Distributed Mitigation To Protect Network Infrastructure Against DDoS Attacks
- 2. 2 • SDN networking equipment company – Founded in 2012, based in Ottawa, Ontario (Canada) – WAN-scale open, programmable SDN equipment for high capacity networks • Product Innovation with market-leading support – Line-rate flow forwarding expertise – Network hardware virtualization – Dynamic SDN traffic management • Architecture assures our platforms move traffic without hitting limitations – Internet-scale offering of advanced SDN features with high precision flow forwarding • Customers utilize for rapid service creation and delivery within their networks – ISP, SP, IX, CDNs, hosting providers and NREN customers worldwide – Very large networks: Each moving >50Petabytes of data per month
- 3. 3 A Bad Trend in DDoS Attacks BBC – 602Gbps 31/12/2015 Krebs – 665Gbps 20/09/2016 OVH – 1Tbps 20/09/2016 Dyn – 1.2Tbps 21/10/2016 Incapsula– 650Gbps @ 150Mpps 21/12/2016 Mirai Botnet Leet Botnet NWH Botnet
- 4. 4 How to protect against those attacks? Network Infrastructure Protection Application Protection Name Server Protection >90% of attack traffic is volumetric Network Infrastructure Protection Types of DDoS Attacks Verisign Oct. 2016
- 5. 5 Clean Pipes with a Layered Defense 46.3% ICMP 32.5% TCP 19% UDP 22% SYN Multi-vector, large-scale attacks are the name of the game = difficulty level HIGH 7% NTP Application attacks Volumetric attacks 9% App ISP / Hosting Provider Network Connected Networks Layered defense removes the right attack vectors in the right place = clean pipes CLEAN PIPES EVERYWHERE
- 6. 6 Clean Pipes with a Layered Defense 46.3% ICMP 32.5% TCP 19% UDP 22% SYN Multi-vector, large-scale attacks are the name of the game: difficulty level HIGH Layered defense removes the right attack vectors in the right place 7% NTP Application attacks Volumetric attacks 9% App ISP / Hosting Provider Network Mitigate volumetric attacks independent of application layer: (a) upstream at the network edge (b) at entry to the scrubbing center (c) wherever it is needed 1 Connected Networks CLEAN PIPES: all volumetric DDoS attack traffic eliminated from the network
- 7. 7 Clean Pipes with a Layered Defense 46.3% ICMP 32.5% TCP 19% UDP 22% SYN Multi-vector, large-scale attacks are the name of the game: difficulty level HIGH Layered defense removes the right attack vectors in the right place 7% NTP Application attacks Volumetric attacks 9% App ISP / Hosting Provider Network Mitigate volumetric attacks independent of application layer: (a) upstream at the network edge (b) at entry to the scrubbing center (c) wherever it is needed 1 Connected Networks Block application attacks separately: closer to the target with existing scrubbing centers or firewalls 2 9% App
- 8. 8 Universal Mitigation: Red Armor NSE7000 Series A. Installs in 10 minutes within existing architectures B. Operates as a bump in the wire anywhere C. Interoperates with existing DDoS detection tools D. Provides full 100G line rate enforcement E. At a fraction of the cost of other 100G offerings F. All of the above
- 9. 9 Corsa Network Security Enforcement 100 Gbps Data Center Router 1/10 Gbps Public Internet Target To Protect BGP Flowspec: Provides specific action to take with corresponding network traffic 80 Gbps Red Armor Enforcement of rules issued by Detection • Adds to existing architecture, anywhere • 100% transparent means no added attack surface • No shared control with routing • No performance degradation with small packets • No performance degradation with large number of rules • 5K/second rule updates via BGP Flowspec at DDoS detection points Border Router
- 10. 10 GigaFilterTM 100 Gbps Data Center Router 1/10 Gbps Public Internet Target To Protect 80 Gbps Red Armor WHAT? Allows >4 Billion IPv4 addresses to be blocked (entire IPv4 address space) in <1ms. WHY? IoT botnet attacks involve hundreds of thousands, soon to be millions, of compromised IoT devices, each with their own source IP addresses WHO CARES? ISPs, SPs, Hosting providers, CDNs are at aggregation points in the network where IoT scale can take down a border router or further downstream a data center router. WHY CORSA? IoT scale (performance) and economics for anywhere in the network Border Router
- 11. 11 Red Armor NSE7000 Series Simple, High Performance Mitigation Simple, High Performance Mitigation Where you Need It