Arbor Networks的抗DDOS技术已经被集成到Alcatel-Lucent的业务路由中
By Jeremy Kirk
January 18, 2012 01:22 PM ET
【译文】
IDG（美国国际数据集团）新闻服务------Alcatel-Lucent正提供抵御DDOS攻击的Arbor Networks的路由器。
这两家公司已经合作把Arbor的威胁管理系统（TMS）应用于Alcatel-Lucent的7750路由器用来过滤攻击流量。这好似第一次Arbor将软件嵌入到路由器，因为他销售独立的TMS。
Tom Bienkowski ，Arbor的产品营销主任说：TMS将作为一个刀片被集成到服务路由。每个刀片能处理5千兆比特每秒的流量，适合SR-7和SR-12版本的7750路由器。
大大小小的公司越来越多地看到DDOS攻击，为了使网站脱离正常运行轨道而大量轰击网站。黑客集团为反对公司政策，为了惩罚他们而开展了一系列DDOS活动，如MasterCard 和 PayPal运动。
Bienkowski 说，使用TMS，因为有自己的网络边缘，服务供应商能够使用7750路由器过滤掉攻击流量。如果一个服务供应商发现了一个DDOS攻击它的网站，为了清理攻击流量使其成为合法流量，恶意流量的运输将会重新路由到一个“净化”的数据中心。
但是这是昂贵的，因为一些服务供应商可能需要为传输流量到另一些服务器的数据中心而付费。Bienkowski说：从本质上来说，他们将支付发送攻击的流量。
Bienkowski说：这个新产品可以给服务提供商有机会赚更多的钱，相比甚至超越了其他服务，超出了单纯的连接，比如VPN。到目前为止，20个服务供应商正在测试系统。
【原文】
Alcatel-Lucent, Arbor Networks partner on DDOS mitigation
Arbor Networks' anti-DDOS technology has been integrated into Alcatel-Lucent's service routers
By Jeremy Kirk
January 18, 2012 01:22 PM ET
IDG News Service - Alcatel-Lucent is offering a router with technology from Arbor Networks that defends against distributed denial-of-service attacks, the two companies said Wednesday.
The companies have partnered to put Arbor's Threat Management System (TMS), which filters out attack traffic, into Alcatel-Lucent's 7750 model router. It's the first time that Arbor has embedded the software into a router, as it sells stand-alone TMS appliances.
TMS will be integrated as a blade that goes into the service router, said Tom Bienkowski, director of product marketing for Arbor. Each blade can handle 5 Gbps per second of traffic and will fit inside the SR-7 and SR-12 versions of the 7750 router.
Companies large and small increasingly see DDOS attacks, which bombard websites with traffic intended to cause sites to go offline. The hacktivist group Anonymous has waged DDOS campaigns against many companies such as MasterCard and PayPal as punishment for policies they oppose.
With TMS, service providers using the 7750 will be able to filter out attack traffic at the "edge" of their networks as it comes in, Bienkowski said. If a service provider detects a DDOS attack coming into its network, the malicious traffic is rerouted to a regional "scrubbing" data center in order to sort out the legitimate traffic from attack traffic.
But that can be expensive, since some service providers may have to pay other service providers in order to send the traffic to their data center. Essentially, they would be paying to send attack traffic, Bienkowski said.
The new product also gives service providers a chance to make more money, along the lines of others services provided above and beyond mere connectivity, such as VPN (virtual private network), Bienkowski said. So far, 20 service providers are testing the system.
Send news tips and comments to jeremy_kirk@idg.com
