DDoS *** in the earliest dating back to 1996, the year 2002 appears frequently in 2003, it has begun to take shape. At that time, the domestic Internet has just started, the network bandwidth is generally small, usually no more than the amount *** 100M, but development was slow domestic network security, protection products and methods than less, many Internet companies are facing DDoS *** powerless, *** were a few seconds off the server to its knees. With the development of the domestic Internet, more and more attention to network security environment, the network security industry through years of continuous accumulation of technology, can make the appropriate protection programs for different types ***, today ink security are concerned that DDoS integrated circuit type of protection and the advantages and disadvantages.
First, the flow type of cleaning:
1, clean room pure flow, said here is by room Yingkang contained herein UDP SYN cleaning and washing.
2, type of international routes, traffic *** defensive way of thinking international routes, if there *** in, the line will automatically modify the route designated routes cleaning center back to the source to separate clean clean, no time or *** * ** stop direct access without having to modify the route.
3, domestic type, all access to foreign Block all, because foreign broilers can lead to very large traffic *** geometric times, basically most experienced traffic *** than half are from abroad, if the flow * ** there may be foreign 800G traffic accounted for more than 400G.
Second, a comprehensive analysis of the advantages and disadvantages lines:
1, a dike
advantages: the distribution of the major core nodes linked cleaning, is currently the largest flow of clean, no doubt.
Cons: pure line telecommunications, telecommunications access speed is not affected but other line access in general.
2, telecommunications
Advantages: widely distributed, pure telecommunications lines, by Yingkang room.
Cons: pure line telecommunications, telecommunications access speed is not affected but other line access in general.
3, China Unicom
advantages: wide distribution, excellent access Unicom line, Yingkang protection is generally not high.
Cons: access other lines do not comment.
4, mobile
advantages: wide distribution, mobile access lines outstanding, Yingkang protection is generally not high.
Cons: access other lines do not comment.
5, pure BGP route
advantages: excellent access to each line.
Cons: Yingkang by room.
With years of development DDoS *** *** type and size of increasingly diverse and complex, enterprises in the choice of security measures, we must first analyze *** type and size, and then select the appropriate high defense service. Ink security self-development WAF fingerprinting architecture automatically recognize the different types of DDoS / CC *** type, near-source cleaning to ensure stable operation of the server through.