CLOUD-BASED DDOS PROTECTION FOR HOSTING PROVIDERS

Transcription

1 CLOUD-BASED DDOS PROTECTION FOR HOSTING PROVIDERS A STRONG PARTNER

2 OUR PORTFOLIO COMPANY Expand your own portfolio with an IT security expert that has redefined DDoS protection from the cloud. Link11 is a European IT security vendor specializing in DDoS protection, headquartered in Frankfurt, Germany with operations in the UK, US, Switzerland and Austria. Established in 2005 Link11 has been pioneering DDoS protection since the early days of attacks. Originally founded as a Hosting Provider Link11 s DDoS Protection has been developed in 2011 to protect its own customers and network. The cloud-based Link11 DDoS Protection Platform is entirely built using proprietary, patent pending technology. The state of the art platform uses Artificial Intelligence and enables Link11 to protect critical infrastructures from all types of DDoS attacks, which in turn gives customers the peace of mind to focus on their core business. Link11 protects some of Europe s largest media, financial, e-commerce and online organizations. The company has won numerous awards and continues to innovate to ensure that Link11 is always one step ahead of the game. The company's strategic and international points of presence in Frankfurt, Amsterdam, London, Zurich, Los Angeles, Miami and New York ensure resilience, performance and no single point of failure. Link11 has built a global network and continues to expand with locations in Asia and the Middle East in the near future.

3 DDoS Protection for Hosting Providers DDoS attacks are becoming an even more threatening issue. In the past, local bandwidth was sufficient to withstand these attacks or the attack traffic was just blackholed which is still a popular method. Unfortunately, the effect is the same as during a DDoS attack: the customer is offline. Nevertheless, it is useful to prevent the collateral damage of other customer s local infrastructure being affected by the overload as well. The standard situation of a hosting provider is usually the following: There are existing redundant internet connections that are provided by two or more ISPs/carriers (multihoming). The infrastructure behind is shared by most customers. When these shared resources are overloaded by a DDoS attack (i.e. internet connection, access router or firewall) this will have a serious impact on the whole system. A traditional DDoS protection solution based on an appliance only works as long as the attack does not exceed the physical size of the internet connection or the performance capacity of the hardware. Nowadays, attacks beyond the 100 Gbps mark are not uncommon. Yet, only a handful of hosting providers can provide such bandwidth or appropriately dimensioned hardware to protect against these large attacks. The only option is to reroute the traffic over an external protection service that has access to the needed resources to filter the malicious traffic. The Link11 Protection Solution for Hosting Providers includes all useful measures to protect the hosted customers.

4

5 LINK11 DDOS PROTECTED IP-ACCESS The Link11 infrastructure has been developed to filter out large-scale DDoS attacks. Additionally, it is used by a lot of clients as an IP transit network. By connecting to the DE- CIX, AMS-IX, LINX and the important TIER1 carriers Link11 is able to provide a powerful high-performance network. Global scrubbing centers filtering DDoS attacks complete the infrastructure. Due to this global network Link11 is able to provide a fitting product to protect hosting platforms. By connecting the data center (or the shared internet access platform) with the Link11 network all clients using this connection have access to the protection against volumetric and protocol-based attacks. A Layer2 or fiber connection is necessary. In most cases these can be rented from common ISPs/carriers for an attractive fee. Clients receive an IP address from their hosting provider that is part of the ( /24) network which is solely using the Link11 connection. If an IP address within this network is attacked, the traffic targeting this IP will be automatically directed over the Link11 DDoS Filter in real time. All other IP addresses within the protected address range receive their data as usual over the Link11 IP Access without going through a DDoS filtering process and being affected by the attack. The solution has more advantages than just the granular filtering per IP address and the various options of attack identification and mitigation. The uninterrupted data flow for unaffected customers is clearly a benefit as well. There is no collateral damage that could push uninvolved customers offline. Additionally, the affected customer would not have to suffer from blackholing. The protected platform and clients are always available. The hosting provider should install a separate access router to guarantee complete protection. The necessity of the infrastructure to run a protected hosting platform is self-explanatory. Generally, small businesses that do not need a large number of IP addresses or do not have a sufficient IP range to receive access to an own BGP-based DDoS protection are potential customers for this solution. On the commercial side hosting providers have to take care of the data transfer fees (IP access) which they pass on to the customers. All they need to do is to purchase one protection per IP address from Link11 which they sell to their customers including their own margin.

6 LINK11 BASIC BGP PROTECTION (WHITE LABEL) A further protection option for customers with a larger network range ( /24) is to route these via a BGP announcement over the Link11 DDoS Protection Filter. A number of customers use a net range of 256 connected public IP addresses (/24 Class C) or more. Generally, services like VPN, FTP, mail, Web, etc. run in this net range. If one of these elements, i.e. mail server, is attacked with DDoS the other services are potentially affected as well because the attack can block the internet connection either way independent of the target. To protect this network range in the first place you need to set up a GRE tunnel between the customer infrastructure and a DDoS protection filter. Alternatively, the hosting provider can connect to the Link11 DDoS Protection Cluster by a Layer 2 connection. When the customer is attacked the IP address range is handed over to Link11 (BGP announcement). The complete traffic is cleansed in the DDoS filter and afterwards routed over the GRE connection to the origin server. This is also a protection against volumetric and protocol-based attacks. The DNS Forwarding Protection from Link11 can be combined as an expansion. The hosting provider can offer its own managed security solution like Web Application Firewalling (WAF). The pricing of this solution makes the basic protection attractive. The solution provides an excellent protection foundation and can be purchased directly and easily through its hosting service as a white label solution. Benefits Basic contribution per customer Protection against attacks up to 100 Gbps (optionally 200Gbps) 50 Mbps of Clean Pipe (optional Upgrade up to 150 Mbps) Calculation per rerouting (in calendar days) Maximum one 24/ network ranges can be protected

7 UNPROTECTED PLATFORM If customer A is attacked, the Internet access, the access router or the firewall is overloaded. Like every other customer, customer B is offline as well.

8 PROTECTED PLATFORM If customer D is attacked, the DDoS filter detects the unwanted traffic and filters it. The access link is not overloaded and all customers remain online.

9 LINK11 BGP PROTECTION STANDBY / PERMANENT To extend the Basic Standby Protection Link11 offers their DDoS protection via BGP for larger network ranges and customer installations as well. It includes a larger service coverage and is meant for more complex infrastructures. In the smallest version you get access to standby with a GRE router connection including 250 Mbps clean traffic. The large version has even more to offer: protection up to 500 Gbps, permanent connection to four routers (optionally more routers possible) and 1 Gbps clean traffic included. Extended features compared to the basic package are: Extended features Protection of larger network ranges Higher Clean Pipe und larger protection (up to 500 Gbps) Direct connection to the Link11 DDoS Filter Permanent routing over the Link11 DDoS Filter Connection of multiple locations Monitoring Appliance SLA up to 99.99%

10 LINK11 DDOS PROTECTION VIA DNS-FORWARDING To protect web servers from volumetric, protocol-based and application-based attacks, or rather to enable intelligent filtering of HTTP/S traffic, Link11 offers the option to use a DDoS proxy. The intelligent filter technology developed by Link11 is especially useful as an addition to the BGP Standby Protection. Most DDoS attacks still target the web server. By permanently directing the traffic over the Link11 DDoS Protection attacks are identified and filtered in real time. Link11 has developed an Artificial Intelligence that can analyze the behavior of users. The regular user movement on customer websites is permanently analyzed by machine learning algorithms and new requests are aligned to several hundred attributes. Deviation is scored in a special model developed by Link11. If the request reaches a certain score, it can be blocked or further analyzed. This way, web servers are protected on application layer. Various large organizations in e-commerce, finance and media are using this service for many years. To activate the protection the A records in the DNS are changed and a new IP address from the Link11 Filter is registered. The implementation is fast and easy. And the best part of it is: large-scaled changes within the customer's infrastructure are not necessary.

11

12 BADLY PREPARED DDOS ATTACKS COMPANIES ARE INSUFFICIENTLY PROTECTED Link11 and TeleTrust IT Security Association Germany have surveyed more than 250 IT deciders and consultants during the security exhibition it-sa 2016 in Nuremberg on their experience with DDoS attacks and protection solutions. The results come to an alarming conclusion: Only around one third of German businesses are sufficiently prepared for DDoS attacks. The majority of respondents expects an increase of DDoS attacks. While only 60% of the businesses expect a rise of the DDoS threat, a total of 76.5% of the consultants expect that the risk of falling victim to a DDoS attack in the next 12 months will increase. Over 34% of the surveyed businesses have indicated to have already been a victim of a DDoS attack. 61% of consultants mentioned they have had clients that had suffered an attack. Both groups stated that most attackers did not quit after one attack. Over 35% of the surveyed businesses have endured more than 10 attacks. Almost three-quarters of the surveyed businesses state that they believe the company itself is responsible for the necessary precautions and the DDoS protection. Nevertheless, only 39% of the businesses rely on dedicated protection solutions like appliances and a cloud protection.

13 FOR

14 BENEFITS Award-winning DDoS protection. The multi-award-winning DDoS Protection from Link11 is the perfect addition to your IT security portfolio and comes with many benefits. You can profit from the ongoing growth of the DDoS protection market as well as the constant expansion of Link11 in the global market. Link11 received the Deloitte Technology Fast 50 award numerous times as one of the fastest growing technology companies in Germany. The increasing demand for DDoS protection solutions on the part of enterprises offers you a great opportunity to increase your own growth as well. The attractive terms from Link11 provide strategic benefits for your company and clients. AWARDS & PARTNERS

15 CONTACT OUR EXPERTS DDoS attacks are evolving at a high speed and at the same time extorters are exploring new ways to blackmail their victims into paying large sums of ransom. In these times, a reliable protection is needed more than ever. The DDoS Protection Cloud from Link11 is constantly evolving and is fitted to the needs of the current situation. Make an appointment today to talk to one of our experts in order to find out which of the Link11 DDoS Protection Solutions is the most appropriate for you and your customers. Please visit to find more useful information on the Link11 technology and read up on our quarterly DDoS reports for Central Europe. +44 (0) sales@link11.com

16