Huawei AntiDDoS Cases
1
Our Customers
Telecom Others
• Beijing Telecom • Beijing Unicom • Shanghai Unicom • Shandong Mobile • Hubei Mobile • Guangdong Telecom • Guangdong Unicom • Du • TerkTelecom • ……
• Tencent • Alibaba • People.com • Yunyun.com • stcsm.gov.cn • 51.com • ……
• Changqing Oilfield • Qinghai Oilfield • Guizhou Broadcasting • Changchun Broadcasting • Tianjin Broadcasting • China Everbright Bank • Peking University • People University • National super computing center • ……
ISP
2
BYTE
Aboute BYTE: Byte is a hosting provider with a strong emphasis on service and
technology and focuses on professionals (web designers or
companies).
In April, the word largest DDoS attacks happened , and BYTE want
to prevent the customers against DDoS.
Challenges
Solution Transparent deployment mode and not change the customer
network structure.
Deep packet technical ,to provide traffic model self- study and
signature self-study ,easy to use, and not need upgrade database.
GUI and report made management easier .
3
Huawei AntiDDoS in Lao Challenge
To ensure 9th ASEM Summit network security and information smoothly
,Lao’s preparing the Comprehensive defend solution.
The importance things is to defend against DDoS attacks .
Lao’s used Huawei AntiDDoS Solution to protect the Network security.
Feedback
on the eve of the Ninth Asia-Europe summit,
the Laos national network and websites were
suffering frequent various types of DDoS attacks.
The longest attack time is up to five hours.
Huawei AntiDDoS solution successfully defend
against DDoS attacks every time. The head of
Lao’s Telecommunication Department praised
that: The system is very powerful!
4
MTN
MTN enterprise business provide Security Service for customers
and AntiDDoS is one of the services .
But online AntiDDoS solution need to expand and do not need
MTN’S service requirement .
Challenges
Solution
High performance meet MTN whole deployment requirements.
Accurate defend and easy to management .
Operational portal made Security service easy to be operated and
customers can do policy and report by them selves.
5
Du in United Arab Emirates
Challenge
• The current traffic policing solution fails to defend the du network against
frequent attacks of more than 10 Gbit/s.
• The customer requires that the current solution be expanded and upgraded
to achieve secure operation.
Solution
• Improve the protection capability from less than 5 Gbit/s to 40 Gbit/s.
• Offer differentiated defense policies to customers of different levels.
• Test the deployed solution. The solution has successfully defended against
many large-traffic DDoS attacks on the live network.
Feedback
• Huawei AntiDDoS solution runs properly and defends against a maximum
of 16,700 DDoS attacks per month, therefore successfully protecting the
network and services.
"Best mobile broadband network in
the Middle East and Africa in 2012."
6
Big traffic attack Prevention for TerkTelecom
Challenge
• There are a lot of DDoS attack in Terk Telecom’s network.
• The average attach reach 82000 times per month, DDoS attack traffic is
400Kpps.
Solution
• Huawei DDoS solution can provide 200G high performance, which can
clean the whole customer’s network traffic.
• Provide different protection policy for different level customer.
• Value
Huawei’s AntiDDoS system is running stably. Success to protect many attacks
which target at the key customers such like Turkey government and all the
banks.
Monopolize fixed operator
7
Tencent Huawei devices have successfully defended the
IDCs against continuous large-traffic DNS Flood
attacks, maintained the normal operation of IDCs,
and ensured service stability and continuity.
So far, no complaint is received.
--Zong Ze, director of Application O&M Security Center in Tencent
DDoS attacks of more than 40 Gbit/s, including multiple application-
layer attacks, such as DNS Flood attacks
Globally distributed IDCs that require an AntiDDoS solution to be
deployed in multiple places with a uniform defense capability
Challenges
Solution Deploy 40 Gbit/s gateways in bypass mode on the outgoing gateway
server to protect carriers against more than 100 types of DDoS attacks.
Deploy the AntiDDoS solution at multiple levels and manage it in a
centralized manner.
8
Alibaba Cloud Computing
Challenge • Frequent DDoS attacks of 10 Gbit/s to 40 Gbit/s
• Diversified attacks Frequent application-layer attacks
• Defense against DDoS attacks for thousands of tenants (small and
medium-sized enterprises) and growth in return on investment
Solution • Deploy 40 Gbit/s gateways in bypass mode on the outgoing gateway server
to protect carriers against more than 100 types of DDoS attacks.
• Offer operation features, such as fine-grained multi-tenancy configurations
and self-services.
After being deployed, Huawei AntiDDoS solution
runs reliably and stably to protect the system
against various DDoS attacks.
In addition, Huawei solution is scalable and can meet our
current and future development demands. Wei Xingguo, department director of the Information Security Center
9
China EVERBRIGT Bank
About 50% of service are implemented through e-Banking .
DDoS attacks cause huge losses for the bank, such as income,
reputation, and etc.
More and more attacks bring challenges to bank operation.
Solution Deploying AntiDDoS solution at the entrance of e-Banking to
defend against DDoS attacks.
AntiDDoS devices could provide high performance.
Off-line deployment mode to provide high reliability.
Support SSL DDoS attacks defend.
Challenges
10
Anquanbao
Anquanbao customers are small enterprises and web-site, these
customers online business are often attacked by DDoS.
Anquanbao provide Security Service for customers but
performance is a big problems.
Challenges
Solution Huawei AntiDDoS 8000 can provide 200Gbps performance to meet
Anquanbao requirtments
Accurate defend and easy to management .
Operational portal made Security service easy to be operated and
customers can do policy and report by them selves.
11
Beijing Unicom IDC operation case study Beijing
Abound 20 key accounts
$ € ¥£
Government Portal
Banking Accounts
Big ISP Sohu、Sina、Baidu…
2011-2012 Trial
operation
Annual Revenue >10Million
Official operation
Copyright©2012 Huawei Technologies Co., Ltd. All Rights Reserved.
The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product
portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive
statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time
without notice.
HUAWEI ENTERPRISE ICT SOLUTIONS A BETTER WAY