Nokia and NL-ix Deploy Europe’s Largest IXP-Based Anti-DDoS

Nokia and European internet exchange NL-ix unveiled the deployment of Deepfield across NL-ix's network in a move that can secure the internet’s continuous and uninterrupted operation.

This collaboration has not only resulted in the largest anti-DDoS solution ever implemented in an Internet exchange point (IXP) environment, but the first anti-DDoS solution deployed by an IXP.

“Our DDoS protection will strive for zero downtime for enterprises, providing security across their entire area of operations,” says Jan Hoogenboom, CEO at NL-ix.

The deployment of Deepfield Defender represents a paradigm shift in how IXPs approach security, with a promise of enhanced protection for enterprises and improved operational resilience.

IXP and the importance of DDoS protection 

An IXP is a physical infrastructure where different networks interconnect to exchange Internet traffic directly, allowing Internet Service Providers (ISPs) to efficiently route data between their networks. 

This local exchange of traffic helps ISPs lower their operational costs by decreasing reliance on external transit providers, while also improving network resilience through alternative routing paths. 

NL-ix, as one of Europe's largest distributed IXPs, operates in over 100 data centres across the continent, facilitating the exchange of internet traffic between various networks.

Nokia's Deepfield Defender, an advanced DDoS security system that leverages AI-driven big data analytics, is integrated directly with Nokia FP5-based routers, which NL-ix is rolling out across its entire network.

“As a result, we can act as a “one-stop-shop” for Europe-wide connectivity and security, where our customers don’t need to work with multiple parties or have complex arrangements to be protected by a third party,” explains Jan.

The Deepfield Defender system, when it detects anomalies indicative of a DDoS attack, it can instantly instruct the Nokia routers to apply filters, effectively neutralising.

“Our solution combines Deepfield Defender’s AI/ML-driven DDoS protection platform and Nokia’s sophisticated IP routers with our patented Secure Genome,” says Jeff Smith, Vice-President and General Manager of Nokia Deepfield. 

Genome is a cloud-based data feed that provides real-time tracking of the internet's security context. This technology offers visibility into over 5 billion IPv4 and IPv6 addresses, allowing for unprecedented insight into potential threats.

Traditional DDoS mitigation often occurs at the edge of the internet, creating unnecessary burden on network infrastructures. 

By implementing protection at the IXP level, threats can be neutralised closer to their source, before they have a chance to impact end-users or enterprise networks.

Moreover, the system's ability to learn from blackholing traffic - a technique where traffic to certain IP addresses is dropped - allows it to continually improve its detection capabilities. 

This adaptive learning approach ensures that the system can respond to new and emerging threat vectors without requiring constant manual intervention from IXP operators.

Building the next line of defence

Over the next four years, in an intensive partnership with Nokia, NL-ix will be investing heavily in reinforcing its position as a pan-European Enterprise Internet and Cloud Exchange. 

This partnership will provide the foundation for NL-ix's transformation into a carrier-grade, fully redundant network capable of supporting mission-critical services for European enterprises.

By leveraging advanced AI and machine learning technologies, coupled with high-performance routing hardware, this solution promises to provide robust protection against DDoS attacks at the core of the internet. 

******

Make sure you check out the latest edition of Cyber Magazine and also sign up to our global conference series - Tech & AI LIVE 2024

******

Cyber Magazine is a BizClik brand