Huawei AntiDDoS Cases

Transcription

1 Huawei AntiDDoS Cases

2 Our Customers Telecom Beijing Telecom Beijing Unicom Shanghai Unicom Shandong Mobile Hubei Mobile Guangdong Telecom Guangdong Unicom Du TerkTelecom 1 ISP Tencent Alibaba People.com Yunyun.com stcsm.gov.cn 51.com Others Changqing Oilfield Qinghai Oilfield Guizhou Broadcasting Changchun Broadcasting Tianjin Broadcasting China Everbright Bank Peking University People University National super computing center

3 BYTE Aboute BYTE: Byte is a hosting provider with a strong emphasis on service and technology and focuses on professionals (web designers or companies). Challenges In April, the word largest DDoS attacks happened, and BYTE want to prevent the customers against DDoS. Transparent deployment mode and not change the customer network structure. Deep packet technical,to provide traffic model self- study and signature self-study,easy to use, and not need upgrade database. GUI and report made management easier. 2

4 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network security and information smoothly,lao s preparing the Comprehensive defend solution. The importance things is to defend against DDoS attacks. Lao s used Huawei AntiDDoS to protect the Network security. Feedback on the eve of the Ninth Asia-Europe summit, the Laos national network and websites were suffering frequent various types of DDoS attacks. The longest attack time is up to five hours. Huawei AntiDDoS solution successfully defend against DDoS attacks every time. The head of Lao s Telecommunication Department praised that: The system is very powerful! 3

5 MTN Challenges MTN enterprise business provide Security Service for customers and AntiDDoS is one of the services. But online AntiDDoS solution need to expand and do not need MTN S service requirement. High performance meet MTN whole deployment requirements. Accurate defend and easy to management. Operational portal made Security service easy to be operated and customers can do policy and report by them selves. 4

6 Du in United Arab Emirates Challenge "Best mobile broadband network in the Middle East and Africa in 2012." The current traffic policing solution fails to defend the du network against frequent attacks of more than 10 Gbit/s. The customer requires that the current solution be expanded and upgraded to achieve secure operation. Improve the protection capability from less than 5 Gbit/s to 40 Gbit/s. Offer differentiated defense policies to customers of different levels. Test the deployed solution. The solution has successfully defended against many large-traffic DDoS attacks on the live network. Feedback Huawei AntiDDoS solution runs properly and defends against a maximum of 16,700 DDoS attacks per month, therefore successfully protecting the network and services. 5

7 Big traffic attack Prevention for TerkTelecom Challenge There are a lot of DDoS attack in Terk Telecom s network. The average attach reach times per month, DDoS attack traffic is 400Kpps. Monopolize fixed operator Huawei DDoS solution can provide 200G high performance, which can clean the whole customer s network traffic. Provide different protection policy for different level customer. Value Huawei s AntiDDoS system is running stably. Success to protect many attacks which target at the key customers such like Turkey government and all the banks. 6

8 Tencent Huawei devices have successfully defended the IDCs against continuous large-traffic DNS Flood attacks, maintained the normal operation of IDCs, and ensured service stability and continuity. So far, no complaint is received. Challenges --Zong Ze, director of Application O&M Security Center in Tencent DDoS attacks of more than 40 Gbit/s, including multiple applicationlayer attacks, such as DNS Flood attacks Globally distributed IDCs that require an AntiDDoS solution to be deployed in multiple places with a uniform defense capability Deploy 40 Gbit/s gateways in bypass mode on the outgoing gateway server to protect carriers against more than 100 types of DDoS attacks. Deploy the AntiDDoS solution at multiple levels and manage it in a centralized manner. 7

9 Alibaba Cloud Computing After being deployed, Huawei AntiDDoS solution runs reliably and stably to protect the system against various DDoS attacks. In addition, Huawei solution is scalable and can meet our current and future development demands. Wei Xingguo, department director of the Information Security Center Challenge Frequent DDoS attacks of 10 Gbit/s to 40 Gbit/s Diversified attacks Frequent application-layer attacks Defense against DDoS attacks for thousands of tenants (small and medium-sized enterprises) and growth in return on investment Deploy 40 Gbit/s gateways in bypass mode on the outgoing gateway server to protect carriers against more than 100 types of DDoS attacks. Offer operation features, such as fine-grained multi-tenancy configurations and self-services. 8

10 China EVERBRIGT Bank Challenges About 50% of service are implemented through e-banking. DDoS attacks cause huge losses for the bank, such as income, reputation, and etc. More and more attacks bring challenges to bank operation. Deploying AntiDDoS solution at the entrance of e-banking to defend against DDoS attacks. AntiDDoS devices could provide high performance. Off-line deployment mode to provide high reliability. Support SSL DDoS attacks defend. 9

11 Anquanbao Challenges Anquanbao customers are small enterprises and web-site, these customers online business are often attacked by DDoS. Anquanbao provide Security Service for customers but performance is a big problems. Huawei AntiDDoS 8000 can provide 200Gbps performance to meet Anquanbao requirtments Accurate defend and easy to management. Operational portal made Security service easy to be operated and customers can do policy and report by them selves. 10

12 Beijing Unicom IDC operation case study Beijing Government Portal Abound 20 key accounts $ Banking Accounts Trial operation Big ISP Sohu Sina Baidu Annual Revenue >10Million Official operation 11

13 HUAWEI ENTERPRISE ICT SOLUTIONS A BETTER WAY Copyright 2012 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.