Distributed denial of service (DDoS) attacks are one of the principal threats to the content delivery network (CDN). Using malware to remotely control thousands of computers and direct them to overwhelm a specific target with bogus requests, CDN DDoS attacks cause a network to come slow or unavailable to users, potentially resulting in lasting damage to reputation, productivity and profitability. Streaming video and video on demand CDN (VOD CDN) providers are especially susceptible, as DDoS attacks can severely degrade the quality of online video.

Despite their frequency, defending against CDN DDoS attacks remains difficult as increasingly sophisticated hackers find new ways to get around firewalls and security systems. Most recently, CDN DDoS attacks are targeting the application layer, taking advantage of layer 7 protocols to wreak havoc. For CDN Internet providers, Akamai Kona DDoS Defender offers leading cloud-based protection against CDN DDoS attacks.

Protection from CDN DDoS attacks

Akamai is the leading provider of CDN cloud services that help enterprises deliver better online experiences on any device, anywhere. Akamai's Kona DDoS Defender provides CDN service providers with a simple and effective solution to stop CDN DDoS attacks. Combining Akamai's highly scalable Intelligent Platform™ with security expertise from Akamai's 24x7 security operations center, Kona DDoS Defender provides protection against the largest and most sophisticated attacks. With CDN DDoS from Akamai, network administrators can continue to provide users with exceptional web experiences day in and day out – even when they are under attack.

Kona DDoS Defender leverages the scalability of the Akamai Intelligent Platform to defend against CDN DDOS attacks. As the provider of the world's most highly distributed CDN architecture, Akamai serves between 15 and 30% of global web traffic every day and has the capacity to mitigate even the largest of attacks. Kona DDoS Defender automatically deflects network-layer DDoS traffic and absorbs application-layer DDoS traffic at the network edge before attacks can reach the application origin. For application-layer DDoS attacks, Kona DDoS Defender combines automated and people-driven capabilities, augmenting adaptive rate controls that mitigate common attacks within seconds.

Key capabilities for stopping CDN DDoS threats

Akamai Kona DDoS Defender provides the CDN provider with a powerful set of capabilities for defending against CDN DDoS attacks.

  • Broad DoS and DDoS attack protection features automatically deflect network-layer attacks (such as UDP and SYN floods) and absorb application-layer attacks (such as HTTP GET and POST floods) at the network edge.
  • Adaptive Rate Controls automatically protect applications against application-layer DoS and DDoS attacks by monitoring and controlling the rate of requests against them. Behavior-based rules respond to bursts of requests in seconds, selectively alerting network administrators or blocking attackers based on IP address and other parameters, and mitigating slow POST attacks.
  • DoS and DDoS attack support includes a fully managed security service to help respond to the threat of CDN DDoS attacks.
  • A 24x7 Security Operations Center provides global coverage for organizations around the world.