Cisco ASR 9000 AIF - Subscription License (1 Year) - 10Gbps VDDoS Instance - A9K-DDOS-AIF-10

• Multigigabit performance
  Each VSM is loaded with high-performance processing capabilities to enable attack traffic analysis and cleaning of the traffic, enabling a defense against large-scale DDoS attacks. Multiple VSMs can be installed in a single ASR 9000 Series router to provide additional scaling of throughput.
• Different attack vectors mitigated
  One of the key benefits of the ASR 9000 vDDoS Protection solution is maintaining blacklists and whitelists. The whitelist contains authorized hosts, whereas the blacklist contains hosts that have been compromised and whose traffic needs to be blocked. These blacklists are loaded on the line cards in an ASR 9000 router, effectively increasing the scaling of the solution. This feature can scale 100 Gbps or more with a single VSM in an ASR 9000. The solution uses complex countermeasures to block application layer exploits. HTTP-specific attacks are detected and mitigated by the solution. DNS services are protected against cache poisoning, resource exhaustion, and amplification attacks. Large reflection attacks such as NTP, DNS, or SNMP are also mitigated by the solution.
• Dynamic diversion
  The Cisco ASR 9000 vDDoS Protection solution deploys an "on-demand" scrubbing model. In a typical deployment it is not inserted in the normal data path of the traffic, but can be configured to be inserted in line if the customer so desires; it employs dynamic diversion to automatically redirect only the traffic destined for the destination under attack while the rest of the traffic follows the normal data path. Redirection of the traffic is transparent and can be accomplished using Border Gateway Protocol (BGP) or BGP Flow Spec, etc. When traffic is scrubbed, all clean or legitimate traffic is then forwarded to the final destination, helping ensure that no critical traffic is lost. By limiting the diverting traffic to only that destined for the target under attack, the vDDoS Protection solution provides optimal resource usage, transparency, and reliability for a scalable solution.

Is your network protected from DDoS attacks? The potential for damage is at an all-time high. The power, frequency, and size and size of these attacks continue to increase at an alarming rate. Results include downtime, potential loss of revenue, decreased network availability, and undue media attention. It is critical to protect your network from these attacks. Cisco and Arbor Networks have collaborated to bring an advanced DDoS solution to this problem. The Cisco ASR 9000 Virtual DDoS Protection solution can create a secure perimeter around your network. And the solution allows you to scale for large and growing service provider and enterprise requirements. The solution is targeted for deployment at peering points, data center and cloud edge, and enterprise WAN edge to effectively create a secure perimeter around networks. The vDDoS solution runs on the Cisco ASR 9000 Series Virtualized Services Module (VSM) and is scalable up to 40 Gbps per VSM.
The ASR 9000 vDDoS Protection solution is typically deployed as an "on-demand" solution but can be configured to work in persistent mode. In the "on-demand" mode, only the traffic addressed to the target of the attack is diverted to the vDDoS solution on the VSM; normal traffic is not affected. The vDDoS solution on the VSM module then identifies and blocks malicious attack traffic while allowing legitimate traffic to flow through to its original destination. Business operations continue uninterrupted, even in the midst of a DDoS attack. The ASR 9000 vDDoS Protection solution is a scalable solution allowing customers to incrementally scale up with just a license or they can install multiple VSMs in a single chassis, incrementally scaling to multiple times the capacity of a single Cisco ASR 9000 Series VSM. This scenario allows the service to scale for large and growing service provider and enterprise requirements.