DDOS Shield - The best protection against a large-scale DDOS attack

PEER 1's DDOS Shield protects your mission-critical online presence by leveraging our high capacity network infrastructure and geographical diversity to distribute an incoming DDOS attack, greatly reducing the impact and making it more manageable. PEER 1 has partnered with Juniper Networks to provide an enterprise-class firewall system in each of our major city locations connected to the network that is capable of handling 1 Gigabit of traffic at 500k packets per second. Some of the firewall features include:

• Packet inspection to protect against worms, trojans and other 0-day vulnerabilities
• Gigabit line-speed traffic filtering
• Speaks BGP, GRE and other networking protocols to make traffic distribution seamless between multiple routers

PEER 1's large network presence in multiple cities means that incoming DDOS attacks arrive through different upstreams and peering connections. In each city, customers are placed behind a firewall and are able to set up their own policies and rules for their incoming traffic. This setup is similar to what many other ISPs do. During regular traffic levels or a low-scale DDOS, there is no real difference between a distributed setup and a normal isp-level shared firewall. But when a sustained DDOS larger than a pre-determined amount occurs, PEER 1's network operation center (NOC) is notified. Once they have determined that the attack is sustained, you have the option of going into distributed mode. Once you are in distributed mode, PEER 1 takes the attacked subnet of IPs and redirects it to the firewall closes to the ingress point of the attack. This distributes the attack so that it is now spread out over the capacity of the entire network instead of targeted towards a single city location.

After the DDOS traffic hits a firewall, it is inspected and dropped if necessary. The legitimate 'scrubbed' traffic is then GRE tunneled back to the city where your servers reside, where it carries on to your network. Your online presence can function normally through most high-level DDOS attacks that would have otherwise crippled your network.