Download PDF

Security Services | Service Sheet
Neustar SiteProtect On-Demand
Cloud Service through BGP Redirection
If your infrastructure is more complex, Border Gateway Protocol (BGP) Redirect can
be a smart way to channel traffic through the SiteProtect cloud.
REQUIREMENTS
To use our BGP Redirection service,
you must have:
• A /24 prefix (Class C subnet) at a
minimum
• A BGP (Border Gateway Protocol)
and GRE (Generic Routing
Encapsulation) capable router
• IP address space to terminate
GRE tunnels located outside the
prefixes you need to defend
SETTING UP BGP REDIRECTION
When you sign up for the service,
we’ll work closely with your team
to provision you on the SiteProtect
network, run testing, and configure
GRE. This enables our network to
forward scrubbed traffic.
For More Information
• For more complex infrastructures
• Best for protecting a larger number of hosts and IPs
• Requires you to have at least a /24 prefix (Class C subnet), plus capability for
BGP and GRE tunnels
How It Works
When you’re hit with a DDoS attack, we’ll work closely with you to redirect traffic.
We will only scrub traffic on the inbound route, with outbound traffic generated by
the client’s network going back to the Internet via a normal routing decision.
For affected /24 prefixes, you’ll withdraw BGP announcements from your routers.
From the SiteProtect network, our Security Operations Center will initiate BGP
announcements for the affected prefixes.
Within minutes, SiteProtect will start to absorb the attack. Security Operations will
oversee mitigation. Our network will send clean traffic to your infrastructure via
GRE tunnels.
2) Our Scrubbing centers clean your
traffic in the cloud, allowing legitimage
traffic to proceed to your infrastructure.
3) Cleaned traffic is sent
to you via GRE tunnels
1) After BGP announcement, all
traffic is drawn to Neustar
SiteProtect scrubbing cloud.
SITEPROTECT
Call +1 888.367.4812
Online www.neustar.biz/ddos
4) Final response sent back to
legitimate visitor. Good to go!
Neustar has you covered with the people, processes and technology to protect not
just your website but your entire network from attacks.
About Neustar
Neustar, Inc. (NYSE: NSR) is the first real-time provider of cloud-based information services and data analytics, enabling marketing and IT security
professionals to promote and protect their businesses. With a commitment to privacy and neutrality, Neustar operates complex data registries and uses
its expertise to deliver actionable, data-driven insights that help clients make high-value business decisions in real time, one customer interaction at a
time. More information is available at www.neustar.biz.
21575 Ridgetop Circle, Sterling, VA 20166 / +1.571.434.5400 / www.neustar.biz
©2014 Neustar, Inc. All rights reserved.
TI_01_SP-SiteProtect-bgp-redirect-v053014

Download Report