DDoS Protection & Congestion Management
“The advantage of the DPI system from Allot Communications is that it can be deployed on a virtual infrastructure. Thus, we were able to reduce the initial cost (CAPEX) and reduce the payback period of the system.”
Assure user Quality of Experience by removing congestion coming from incoming DDoS attacks, outgoing abusive Bot traffic and bandwidth-hogging applications and users.
Allot’s comprehensive, flexible and cost-effective solution, based on diverse capabilities of the Allot Service Gateway and DDoS Secure, met all of Amtel’s congestion challenges. The fully virtualized implementation increased the solution’s cost effectiveness.
- Protect service availability
- Gain full visibility of DDoS attacks and valuable threat intelligence
- Enhance customer satisfaction through improved quality
- Reduce costs through virtualization
Service Assurance and QoE thru Bandwidth Management and DDoS Mitigation – in a fully virtualized NFV implementation
AMTEL-SVYAZ provides a full range of VSAT satellite based communications services to business-to-government, business-to-operator, business-to-business and business-to-consumer market segments. The company is based in Moscow, Russia and was established in 2004 to provide satellite services for all of Russia, from Kaliningrad to Kamchatka. To date AMTEL-SVYAZ has successfully implemented over 90 federal projects and has a wide and fast-growing customer base. The company continuously invests in new solutions and technologies to ensure high customer satisfaction and attract new customers.
Prior to implementing the Allot solution, the company was aware of internet quality degradation issues that were impacting customers. The causes of the degradation were identified as a combination of DDoS attack traffic and heavy bandwidth consumers such as P2P traffic, TCP-spoofing sessions and other bandwidth hogging “stormy users” like Microsoft updates. Together, around 30% of available bandwidth was being hijacked. Attempts were made to solve the problem by using WD-WAN and SCPC channel optimization solutions but they only helped partially resolve the TCP-spoofing issue. P2P and DDoS traffic continued to harm network QoS and user QoE.
AMTEL-SVYAZ was determined to find a comprehensive, flexible and cost-effective solution. They spent six months testing and comparing various international and local DPI-based alternatives. Major comparison criteria were: scalability, cost, accuracy of protocol/application detection, security, stability and manageability/operation. Allot’s solution combines application aware traffic control, DDoS protection and Bot containment to prevent bandwidth abuse by P2P applications, block DDoS attacks on AMTEL-SVYAZ’s infrastructure and thwart outbound Botnet abuse. Allot subscriber awareness enabled effective per-subscriber traffic management which contained outbound DDoS and Botnet abusive behavior for every user in the network saving uplink bandwidth.
Based on rigorous functionality testing, Mr. Igor Ilinchik (First Deputy CEO, AMTEL-SVYAZ) selected the Allot Service Gateway and DDoS Secure in their fully virtualized mode on COTS hardware. In addition to superior performance, implementation in virtual mode further reduced implementation costs and the overall TCO for the project.
An additional factor in the decision was the high-quality response that Allot’s professional services demonstrated by their timely resolution of AMTEL-SVYAZ’s initial and ongoing requirements for a successful POC.
The fact that Allot’s multi-service gateway also supports regulatory compliance and subscriber management integration for advanced policy and charging control enhanced the solution fit for AMTEL-SVYAZ.
By activating Allot Traffic Management and DDoS Protection functionality on a virtualized implementation of the Allot Service Gateway multiservice platform, this the Russian VSAT service provider is able to:
- Protect service availability and quality by blocking both inbound and outbound DDoS attacks and preventing unbalanced bandwidth consumption:
– Capacity has increase by approximately 30% across VSAT hubs
– Satellite resource savings of ~15% are anticipated
– ROI is expected within 3-7 months
- Gain full visibility of DDoS attacks, and valuable threat intelligence that previously was not available
- Enhance customer satisfaction – video streaming quality has improved and YouTube traffic is up
- Meet regulatory compliance requirements through WebSafe functionality
- Save time and expense by implementing a fully virtualized solution
A final, anticipated benefit is AMTEL-SVYAZ’s plan to increase integration of Allot Subscriber Management Platform with their billing systems to create and enforce even more effective customer offers to increase AMTEL-SVYAZ’s revenues and their customer satisfaction.
This customer story highlights the many benefits that services providers gain from Allot’s unique mix of network intelligence and security solutions. With Allot, in partnership with Mandarin Solutions, AMTEL-SVYAZ enjoys true multi-service functionality in a fully virtualized form factor. Allot’s “See. Control. Secure.” DPI-based solutions lower TCO while addressing multiple, critical needs – both today and tomorrow.