Alcatel-Lucent is integrating Arbor Networks’ Threat Management System into its 7750 IP Service Router to provide advanced distributed denial-of-service (DDoS) protection in carrier clouds.
Last year, Arbor Networks documented a single, sustained DDoS attack at up to 100G, making it essential that carrier clouds address this escalating challenge.
The partnership between Alcatel-Lucent and Arbor makes it possible to detect and eliminate DDoS closer to the edge of the network, before infected traffic is carried across the network to its target. By integrating Arbor’s Threat Management System (TMS) software into Alcatel-Lucent’s IP routers – wherever they are located in a given network – attacks can be detected and dealt with at the edge of the cloud, closer to the location of the attack, which is a much more effective and less costly approach.
The capabilities will be delivered either as a standalone appliance or running on an MS-ISA blade for the 7750 Service Router. The solution delivers
60 Gbps+ performance per chassis, which Alcatel-Lucent describes as “industrial strength DDoS scrubbing.”
The approach also enables Service Providers to offer a cloud-based service to detect and mitigate DDoS attacks on the networks of their enterprise customers. Effectively, the DDoS scrubbing capability is extended to all customers, services and geographies serviced by the router.
Kevin Macaluso, Vice President and General Manager of the IP Service Router Product Unit at Alcatel-Lucent, said: “Denial-of-service attacks are a rapidly growing problem in service provider and Enterprise networks today. Unchecked, they can bring down large networks and data centers for significant periods of time, which obviously has a detrimental impact on productivity and delivery of services. By integrating Arbor’s TMS into our IP service routers, we’re essentially moving the defensive perimeter further out to the ‘edge’ of the service provider’s network – in effect stopping criminals at the border.”
The combined solution is available today and is currently in trials with more than 20 service providers worldwide.
http://www.alcatel-lucent.com/ddos-protection
- In Novermber 2011, Alcatel-Lucent introduced a new “CloudBand” architecture for delivering “virtual telco” functionality and enterprise services from cloud-enabled data centers rather than dedicated telecom platforms. CloudBand, which will be the foundation for a new class of ‘carrier cloud’ services such as IMS or video applications, leverages generic compute resources deployed in regional data centers throughout a carrier’s footprint. The goal is to make the carrier infrastructure more agile, elastic, resilient and application-aware.
- In 2010, Tektronix Communications acquired Arbor Networks, a provider of network security and management solutions, for an undisclosed sum. Arbor Networks, which is headquartered in Chelmsford, Mass., supplies solutions for the detection and mitigation of network security threats based on IP flow-based analysis. Its products include Arbor Peakflow, a carrier-class Distributed Denial of Service (DDoS) prevention platform, and its Arbor eSeries platforms for broadband service optimization. Its customers include mobile and fixed-line operators, cable and DSL providers, ISPs and other cloud-based infrastructure and service providers.
