I wanted to address the recent network issues ST has faced so you would have more information regarding the issues, why they happened, what we did to resolve them, and what changes we made to prevent them from occurring again.
Over the past ten years, common ddos attacks have been in the range of several million packets per second. These attacks have been handled nicely by our distributed firewalls with capacity up to about 10 million packets per second. Our generation ii mitigation system revolutionized ddos protection by being the first to integrate automated inline non-intrusive dynamically-scalable security.
Over the past six months, we have seen an increase in attacks that exceed 10 million packets per second, going as high as about 40 million packets per second. These attacks mostly seem to originate from areas outside the United States. They are extremely potent and often long-lasting. Our systems have been unable to cope with these via traditional methods.
About six months ago, we began testing our generation iii mitigation system, anticipating that these attacks would eventually become the norm. Our generation iii mitigation system, including our advanced mitigation platform SecurePort, has undergone extensive performance, stability and scalability testing. The system is capable of performing up to about 60 million packets per second with no impact to customer traffic.
This is an important metric for customers. A 10 Gbps circuit, with overhead, is capable of receiving about 15 million packets per second. Currently, we have four 10 Gbps circuits. This means we are effectively capable of mitigation ddos attacks at line rate!
Over the past four weeks, we have been making network changes to integrate our generation iii security system. During this transition phase, we continued to encounter massive ddos attacks that may have impacted the network for brief periods of time. It is important to note that none of the changes we made resulted in this. Our network changes were non-intrusive.
The final stages of this network integration and migration will be taking place today and tomorrow. With the integration of this new system, ST will have one of the largest single node ddos protection deployments in the world.
We look forward to protecting you!
这是一个为客户的重要指标。 10 Gbps的电路开销，是能够接收每秒约15万包。目前，我们有4个10 Gbps电路。这意味着我们能够有效地减轻DDOS攻击线率！