Rostelecom has upgraded its Anti-DDoS platform to protect its backbone network. The system is designed to prevent attacks from impacting the network core and disrupting services for corporate and government clients.
The platform monitors traffic flows, searches for anomalies, and, if DDoS is suspected, redirects the load to a scrubbing center. There, malicious traffic is blocked, while legitimate requests continue to reach users.
Separate capacity was allocated for the project, and protection was moved to new specialized equipment — routers in the backbone network's core. These were placed on mutually redundant sites so that the platform would continue to operate even if one of them failed.
Before launch, RTK-Service engineers recreated a segment of Rostelecom's network in a laboratory and tested how scrubbed traffic would return to clients. Solar, which provides DDoS protection as a service, also participated in the project.
As a result, Rostelecom has a more manageable scheme: suspicious traffic is not mixed with normal load, attacks are diverted for filtering, and clients should receive already scrubbed traffic.