DDoS Volumetric Mitigation Service

Our cloud-based, volumetric DDoS mitigation service was procured on behalf of the community.

Internet2 Global DDoS protection logo.

Volumetric, Cloud-based Solution

Cloud-based volumetric Distributed Denial of Service (DDoS) Mitigation Service procured on behalf of the community from Radware.

Contact us for more information

Name*

DDoS Volumetric Mitigation Service

Hidden
* required fields

How Does the DDoS Volumetric Mitigation Service Work?

DDoS Mitigation Service Subscribers procure 1G of clean pipe capacity and clean traffic is returned on their Internet2 connection. At setup time a VLAN will be configured on the Subscriber’s existing Internet2 connection over which the Subscriber will peer (via BGP) with Internet2’s Scrubbing VRF. This VRF, in turn, is configured by Internet2 to peer with the DDoS Mitigation service provider.

Using BGP, the Subscriber will provide to the VRF the set of address prefixes that should be scrubbed should the need arise. When an attack is detected, the Subscriber or Tenant will signal, using a BGP community, the specific subnet (a /24) to be scrubbed.

The DDoS Mitigation service provider upon receiving the BGP community indicating the need for scrubbing will advertise the prefix to the greater internet. Traffic will then come into the DDoS Mitigation service provider, which will scrub that traffic and return clean traffic over the VLAN configured at setup time on the Subscriber’s existing Internet2 connection.

Subscriber’s downstream members (e.g., a university or K-12 district) have the option to obtain the same direct access services from the provider as the subscriber by choosing the Tenant option, with an associated fee structure.

The features available to Subscribers and Tenants are:

  • Direct access to the Security Operations Center (SOC) of the provider to initiate mitigation
  • Access to a portal to review mitigation efforts and subsequent reports
  • A direct VLAN on the Internet2 network used to:
    -Peer with Internet2’s Scrubbing VRF
    -Carry clean traffic back to the Subscriber’s routers

An organization that is downstream from a Subscriber and/or Tenant and that has its own publicly registered Autonomous System Number (public ASN) and does not choose the option to be a Tenant is considered to be a Subtenant of the Subscriber, with associated fees. A. Subtenant will not have access to the SOC or Portal. Subtenant fees are not applicable to any organization eligible to receive USF E-Rate funds such as K-12 schools and Libraries.

Contact Internet2 to discuss your DDoS Mitigation Service needs.

Internet2’s DDoS Mitigation Service is available to:

To speak with someone about the DDoS Mitigation Service or to request a quote, please email DDoSService@internet2.edu.

Learn More and Get Involved

Program Information

Eligible Subscribers: Available to Internet2 Higher Education Members, R&E Network Members, Network Connectors
Sponsors: Internet2
Email: ddosservice@internet2.edu
Contact: Linda Roos

Have Questions?

Reach out to us for more information about DDoS Volumetric Mitigation Service

Name*

DDoS Volumetric Mitigation Service

Hidden
* required fields