: -

: -

,

?!DDoS 2007 - NetFlow : DDoS .

:

wirespeed (SYN flood, UDP flood, ICMP flood)wirespeed RegExp (HTTP, DNS, SIP) (IPS)

: Application DDoS & Intrusion Activities

Network & Application DDoS & Intrusion Activities

Application DDoS

1-

2-

3-

Direct connect (BGP, static)Collocation Dedicated Server www.oblacom.ru Parallels IP (eServer, Jino, Majordomo ..)DNS

node Proxy/NAT

Level3, Linx..9

.

2008 2009 2010 Qrator Networks

? . . user experience. . .

? - . ..Qrator API. ;-)

.

.

.

BGP DNS (emergency proxy)unnel (GRE/IPIP/MPLS VPN)

.

( ) .

? VS

C vs , :Arbor Peakflow SP + TMSRadware DefensePro Cisco Guard: 10+ Gbit/s : .

?

C VS

Mitsubishi BMW ?

vs

?

VS

SLA .

SLA , 1 1 - *SLA12 000 .4 000 .40 000 .1L20 .19 000 .0 .1L2+0 .8 000 .30 000 .1L21 - 0 . >1 - 12 000 .37 000 .0 . 5L1

* IP L1 15 ; .. 2 , . 4 L2 .. - 15 , . - 2 ; .. 4 , . 8

1.01 01.09.2011QratorRTComm 1563109 Spoof 27537 2346 6.790,4 253 1 234- 127 486- 6 11 9 15 485 56 117 8

? , , ..

Text