DDoS Mitigation

Overview

By employing a unique philosophy in attack mitigation, Grove provides a distributed denial of service (‘DDoS’) defense solution that is more powerful and effective than any other on the market today. Our service enables enterprises and service providers to scale against the largest and most aggressive DDoS attacks on the Internet. For businesses that rely on their Internet environments to produce revenue or for day-to-day operations, in-line network defense is required to ensure that business will not be impacted during next generation attacks.

Our services use a global network designed to protect businesses from all forms of distributed denial of service attacks and emerging security threats to DNS, VoIP, and email while simultaneously increasing network performance. Leveraging unique filtering techniques, high-speed bandwidth and peering, advanced routing, and other patent- pending devices, we have created the most powerful DDoS detection and protection system in the world. Consequently, we have demonstrated success in monitoring, filtering, and routing massive traffic flows, often shouldering multi-Gigabit-per-second distributed attacks for its customers. Our solution is easily implemented into networks of all sizes, often with little or no infrastructure investment.

Benefits and features

DNS Redirection / Proxy

• Our original delivery method and still the quickest method to deploy our solution, IPs on our intrusion prevention network (IPN) are provided to the customer. Through a DNS change, all customer traffic is routed to our IPN, where it is cleansed. Once traffic is filtered of malicious content, it is proxied back to the customer’s infrastructure. Proxy is a simple configuration and provides the additional benefit of content caching.

BGP Routing / GRE Tunneling

• The solution can be easily implemented over a dedicated Generic Route Encapsulation (GRE) tunnel. We will announce the customer’s subnet and tunnel traffic to its location via GRE tunnels. GRE tunneling provides a customer several advantages, including total control over when traffic is filtered. Traffic re-routes can be performed quickly using BGP, the standard routing protocol in use today to support complex routing policies.

Direct Circuit

• Imagine having a dedicated circuit that can withstand a 10+ Gbps SYN flood or TCP connection flood. With dedicated circuits, customers will have the defenses required to survive such attacks without notice. Our circuits can be implemented like a standard BGP4-enabled Internet circuit. Connections can be made directly within our points-of- presence, or via a partnered low-cost dedicated circuit directly to our IPN.