13
Huawei AntiDDoS Cases

Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

  • Upload
    lynhu

  • View
    223

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

Huawei AntiDDoS Cases

Page 2: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

1

Our Customers

Telecom Others

• Beijing Telecom • Beijing Unicom • Shanghai Unicom • Shandong Mobile • Hubei Mobile • Guangdong Telecom • Guangdong Unicom • Du • TerkTelecom • ……

• Tencent • Alibaba • People.com • Yunyun.com • stcsm.gov.cn • 51.com • ……

• Changqing Oilfield • Qinghai Oilfield • Guizhou Broadcasting • Changchun Broadcasting • Tianjin Broadcasting • China Everbright Bank • Peking University • People University • National super computing center • ……

ISP

Page 3: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

2

BYTE

Aboute BYTE: Byte is a hosting provider with a strong emphasis on service and

technology and focuses on professionals (web designers or

companies).

In April, the word largest DDoS attacks happened , and BYTE want

to prevent the customers against DDoS.

Challenges

Solution Transparent deployment mode and not change the customer

network structure.

Deep packet technical ,to provide traffic model self- study and

signature self-study ,easy to use, and not need upgrade database.

GUI and report made management easier .

Page 4: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

3

Huawei AntiDDoS in Lao Challenge

To ensure 9th ASEM Summit network security and information smoothly

,Lao’s preparing the Comprehensive defend solution.

The importance things is to defend against DDoS attacks .

Lao’s used Huawei AntiDDoS Solution to protect the Network security.

Feedback

on the eve of the Ninth Asia-Europe summit,

the Laos national network and websites were

suffering frequent various types of DDoS attacks.

The longest attack time is up to five hours.

Huawei AntiDDoS solution successfully defend

against DDoS attacks every time. The head of

Lao’s Telecommunication Department praised

that: The system is very powerful!

Page 5: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

4

MTN

MTN enterprise business provide Security Service for customers

and AntiDDoS is one of the services .

But online AntiDDoS solution need to expand and do not need

MTN’S service requirement .

Challenges

Solution

High performance meet MTN whole deployment requirements.

Accurate defend and easy to management .

Operational portal made Security service easy to be operated and

customers can do policy and report by them selves.

Page 6: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

5

Du in United Arab Emirates

Challenge

• The current traffic policing solution fails to defend the du network against

frequent attacks of more than 10 Gbit/s.

• The customer requires that the current solution be expanded and upgraded

to achieve secure operation.

Solution

• Improve the protection capability from less than 5 Gbit/s to 40 Gbit/s.

• Offer differentiated defense policies to customers of different levels.

• Test the deployed solution. The solution has successfully defended against

many large-traffic DDoS attacks on the live network.

Feedback

• Huawei AntiDDoS solution runs properly and defends against a maximum

of 16,700 DDoS attacks per month, therefore successfully protecting the

network and services.

"Best mobile broadband network in

the Middle East and Africa in 2012."

Page 7: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

6

Big traffic attack Prevention for TerkTelecom

Challenge

• There are a lot of DDoS attack in Terk Telecom’s network.

• The average attach reach 82000 times per month, DDoS attack traffic is

400Kpps.

Solution

• Huawei DDoS solution can provide 200G high performance, which can

clean the whole customer’s network traffic.

• Provide different protection policy for different level customer.

• Value

Huawei’s AntiDDoS system is running stably. Success to protect many attacks

which target at the key customers such like Turkey government and all the

banks.

Monopolize fixed operator

Page 8: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

7

Tencent Huawei devices have successfully defended the

IDCs against continuous large-traffic DNS Flood

attacks, maintained the normal operation of IDCs,

and ensured service stability and continuity.

So far, no complaint is received.

--Zong Ze, director of Application O&M Security Center in Tencent

DDoS attacks of more than 40 Gbit/s, including multiple application-

layer attacks, such as DNS Flood attacks

Globally distributed IDCs that require an AntiDDoS solution to be

deployed in multiple places with a uniform defense capability

Challenges

Solution Deploy 40 Gbit/s gateways in bypass mode on the outgoing gateway

server to protect carriers against more than 100 types of DDoS attacks.

Deploy the AntiDDoS solution at multiple levels and manage it in a

centralized manner.

Page 9: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

8

Alibaba Cloud Computing

Challenge • Frequent DDoS attacks of 10 Gbit/s to 40 Gbit/s

• Diversified attacks Frequent application-layer attacks

• Defense against DDoS attacks for thousands of tenants (small and

medium-sized enterprises) and growth in return on investment

Solution • Deploy 40 Gbit/s gateways in bypass mode on the outgoing gateway server

to protect carriers against more than 100 types of DDoS attacks.

• Offer operation features, such as fine-grained multi-tenancy configurations

and self-services.

After being deployed, Huawei AntiDDoS solution

runs reliably and stably to protect the system

against various DDoS attacks.

In addition, Huawei solution is scalable and can meet our

current and future development demands. Wei Xingguo, department director of the Information Security Center

Page 10: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

9

China EVERBRIGT Bank

About 50% of service are implemented through e-Banking .

DDoS attacks cause huge losses for the bank, such as income,

reputation, and etc.

More and more attacks bring challenges to bank operation.

Solution Deploying AntiDDoS solution at the entrance of e-Banking to

defend against DDoS attacks.

AntiDDoS devices could provide high performance.

Off-line deployment mode to provide high reliability.

Support SSL DDoS attacks defend.

Challenges

Page 11: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

10

Anquanbao

Anquanbao customers are small enterprises and web-site, these

customers online business are often attacked by DDoS.

Anquanbao provide Security Service for customers but

performance is a big problems.

Challenges

Solution Huawei AntiDDoS 8000 can provide 200Gbps performance to meet

Anquanbao requirtments

Accurate defend and easy to management .

Operational portal made Security service easy to be operated and

customers can do policy and report by them selves.

Page 12: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

11

Beijing Unicom IDC operation case study Beijing

Abound 20 key accounts

$ € ¥£

Government Portal

Banking Accounts

Big ISP Sohu、Sina、Baidu…

2011-2012 Trial

operation

Annual Revenue >10Million

Official operation

Page 13: Huawei AntiDDoS Cases - Huawei Enterprise: Leading New …enterprise.huawei.com/topic/2013_HENC/download/A_EN.pdf · 3 Huawei AntiDDoS in Lao Challenge To ensure 9th ASEM Summit network

Copyright©2012 Huawei Technologies Co., Ltd. All Rights Reserved.

The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product

portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive

statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time

without notice.

HUAWEI ENTERPRISE ICT SOLUTIONS A BETTER WAY