Hibernia Networks has introduced Border Gateway Protocol Flow Specification (BGP Flowspec) for its global IP transit services. The new capability provides network operators and enterprise customers a tool enabling them to more quickly address DDoS threats, which are on the rise. According to Arbor Networks’ 2016 Worldwide Infrastructure Security Report, multi-vector DDoS attacks increased to 56 percent of the total DDoS attacks in 2016, up from 42 percent in 2015.
BGP Flowspec saves time between identification of an attack and implementation of remediation schemes by taking a surgical approach to traffic filtering. The capability utilizes the Network Layer Reachability Information (NLRI) functionality to identify specific traffic flows that should be discarded as a component of a DDoS attack. This mitigation solution allows network operators and enterprises to continue to serve end-users in the event of an attack as it does not require the complete shut-down of traffic that typically occurs when a “black-hole” response is applied.
“Given the number of threat vectors on the Internet, it’s absolutely essential that carriers and enterprise customers have the latest in DDoS mitigation capabilities in today’s environment,” states Al DiGabriele, Senior Vice President of Product Management and Marketing at Hibernia Networks. “Hibernia Networks’ IP Transit customers gain a more effective and precise security response tool with BGP Flowspec.”
Click here to view the full announcement.