F5 Networks announces comprehensive DDoS solution
Comprehensive on-premise DDoS solution is designed to deliver widest protection against DDoS attacks
F5 Networks has announced its first comprehensive on-premises DDoS solution available in a single product. The new solution is designed to deliver the widest ranging suite of protections against DDoS attacks that target business applications, the network, SSL, and DNS infrastructures. Fully leveraging the advanced hardware-acceleration capabilities built into the latest F5 BIG-IP platform offerings, the new solution is designed to mitigate as many as 25 DDoS attack vectors in hardware to deliver superior performance and scalability.
"Our new solution makes DDoS mitigation affordable for companies of any size. It delivers the most comprehensive DDoS protection suite of services in the marketplace, provides superior performance results across 25 hardware-accelerated attack vectors, and frees up resources that can be dedicated to providing other security services. Software-only solutions are an excellent choice for certain types of network needs, but when it comes to averting volumetric DDoS attacks, there's no disputing the advantages of a hardware-accelerated solution," said Mark Vondemkamp, VP of Security Product Management, F5.
The DDoS protection solution is one of several reference architectures connected to F5 Synthesis. F5 Synthesis comprises a catalogue of software defined application services (SDAS) and solutions that are designed to enable customers to deliver device, network, and application services without constraints across data centre, cloud, and hybrid environments. Supporting these services are multiple reference architectures that give customers prescriptive guidance on how best to implement F5 technology to address specific business challenges.
F5's new DDoS protection suite is designed to mitigate multiple types of DDoS attacks, from ICMP floods, to DNS query floods, to application attacks such as Slowloris. F5 has expanded the number of attack vectors handled in hardware from one to 25. Based on testing done by F5 with Ixia/BreakingPoint, for example, a fully-loaded F5 VIPRION 4800 device can handle up to 470 Gbps of SYN flood traffic, as much as 10 times that of competitive DDoS solutions, all while continuing to process 160 Gbps of legitimate network traffic without performance degradation. With F5's flexible hardware platform, additional DDoS features can continue to be incorporated in hardware with every release.
By mitigating DDoS threats in hardware, BIG-IP devices are designed to have substantial residual processing power to handle legitimate traffic and perform additional services. This can help customers to consolidate multiple security and traffic management functions, for instance, network firewall, web application firewall, anti-fraud, SSL termination, secure mobility, and access control services,on a single platform.
Hardware-accelerated threat protection is now available across F5's full line of BIG-IP products, including the 5200, 7200, and 10200 series offerings, so companies of all sizes can take advantage of DDoS functionalits. Large organisations and service providers with massive traffic volume benefit from the same hardware-accelerated DDoS protection on high-end F5 VIPRION devices.