下载PDF

NETSCOUT > 实例探究 > Australian Domain Registry Protects Customers with Arbor Networks

Australian Domain Registry Protects Customers with Arbor Networks

技术

网络安全和隐私 - 网络安全

适用行业

电信

适用功能

商业运营

用例

网络安全

服务

系统集成

挑战

Netregistry, Australia’s largest provider of domain names and one of the most trusted Web hosts for small business, was facing an increase in distributed denial of service (DDoS) attacks, particularly recent Domain Name System (DNS) reflection attacks. The company provides multiple services—including domain registry, Web hosting and Web design—to more than 500,000 clients. As a hosting provider, Netregistry is no stranger to DDoS attacks and had many processes already in place for handling them. However, the increase in attacks prompted the company to seek help from an outside provider. Netregistry evaluated a number of companies and outsourcing providers that offer DDoS protection services. However, these companies typically only scrub traffic for a single domain name, which was not feasible for Netregistry due to its large and varied customer base.

关于客户

Netregistry is Australia’s largest provider of domain names and one of the most trusted Web hosts for small business. The company provides multiple services—including domain registry, Web hosting and Web design—to more than 500,000 clients. As a hosting provider, Netregistry is no stranger to distributed denial of service (DDoS) attacks and had many processes already in place for handling them. However, an overall increase in attacks—particularly recent Domain Name System (DNS) reflection attacks— prompted the company to seek help from an outside provider.

解决方案

Netregistry opted to deploy the Pravail® Availability Protection System from Arbor Networks because of the solution’s holistic approach to DDoS protection. The company implemented Pravail at the front of its network and created categories of traffic types based on the services it provides. These were matched with the various protection groups offered within the appliance. This gave Netregistry a single pane of glass to view all its traffic groups, including the amount of traffic that is coming across and what is blocked or not blocked. The company was able to configure various thresholds and fine-tune the settings that are appropriate to its network and its customers. One of the most useful features of Pravail is the ability to do a packet dump in-line on the device. This gave Netregistry one place to view all the traffic coming in and out of the network.

运营影响

Netregistry now has a single pane of glass to view all its traffic groups, including the amount of traffic that is coming across and what is blocked or not blocked.
The company is able to use Pravail as a cross-functional security device, instead of just a DDoS prevention tool.
Netregistry has full visibility of traffic activity occurring on the border of its network.

数量效益