AntiDDoS8160 200G DC Basic Configuration(include X16 DC Chassis,2*MPU,4*SFU200B)

Product Overview

During the era of mobile Internet and Big Data, DDoS attacks become increasingly complex.

1. The peak attack traffic keeps growing. In 2013, the peak DDoS attack traffic exceeds 300 Gbit/s..

2. An increasing number of application-layer DDoS attacks occur in data center service systems..

3. The number of mobile service-specific DDoS attacks that come from mobile terminals increases rapidly.

4. Data centers are attack targets, and hackers can easily use a data center to launch attacks to external service systems.

Traditional anti-DDoS solutions in the industry cannot adapt to these changes.

Huawei Next Generation (NG) Anti-DDoS Solution performs abstract modeling and reputation system construction on network traffic from over 60 dimensions by leveraging Big Data analytics technologies. Compared to traditional anti-DDoS mechanisms in the industry, the Huawei NG Anti-DDoS Solution provides more precise and comprehensive DDoS attack defense.

Product Features

Anti-Large-DDoS: Heavy Traffic DDoS Attack Defense

• Multi-core, distributed hardware architecture and Big Data-based Intelligent Defense Engine1 provide T-bit defense performance.
• Instant attack response within seconds protects link availability.

Anti-App-DDoS: Application DDoS Attack Defense

• Performs all traffic collection and 3-7-layer packet-by-packet analysis, create traffics models from over 60 dimensions, and provides the most precise and comprehensive attack detection.
• Fine-grained reputation system consisting of local session behavior-based reputation, service access behavior-based reputation, geographical location based reputation, and botnet cloud-based reputation precisely guards against various lightweight, slow application-layer DDoS attacks launched by botnets.
• Full-scale defense against over 100 attacks guarantees continuous operations of key service systems that encompass enterprise web applications and DNS, DHCP, and VoIP services.

Anti-Mobile-DDoS: Mobile DDoS Attack Defense

• Dynamic, real-time upgrade of 20,000 fingerprints and filtering of traffic by a mobile botnet database effectively defend DDoS attacks launched by botnets and mobile terminals and guarantees authorized access to mobile gateways.
• Protects availability of mobile data service systems such as mobile payment, mobile store, mobile social networking, and mobile game.

Anti-Outbound-DDoS: Inbound-to-Outbound DDoS Attack Defense

• Blocks the global most active zombie, Trojan horse, and worm controlling traffic.
• Blocks C&C DNS request traffic.
• Prevents DDoS attacks at the source.

Managed-Anti-DDoS: Managed DDoS Attack Defense Service

• Provides Zone (VIP)/service-based automatic and manual defense policies and complete defense methods.
• VIP/service-based independent statistics reports and email sending simplify defense management.
• Increases VIP' service stickiness by providing Portal-based self-service functions for VIP.
• Supports large-scale operations, for example, 10,000 VIPs/services, and protects 10,000 IP addresses of each VIP/service simultaneously.