THUNDER TPS (THREAT PROTECTION SYSTEM)
DDoS Detection & Mitigation
The industry highest-performance automated DDoS protection, A10 Networks’ Thunder® Threat Protection System (TPS) detects attacks across the network and mitigates DDoS attacks at the network edge. Used by the top global communications service providers, cloud, mobile, and online gaming providers, Thunder TPS provides unrivaled precision, scale, and automation.
Key Benifit
Fast and Effective
Zero-touch Intelligent Automation
Maximize ROI with DDoS Scrubbing Services
- Multi-modal source-based defense pinpoints attackers without damaging users
- 5-level adaptive mitigation policy
- Zero-day Automated Protection (ZAP)
- Actionable DDoS Weapons Intelligence at a scale of 96M-entry black/white lists
- 100 ms mitigation interval
- 3-second detection response
- Adaptive real-time learning and service discovery
- Autonomous traffic steering with integrated BGP, ISIS, OSFP routing protocols
- Zero-day Attack Pattern Recognition (ZAPR) engine
- Interworking distributed intelligence with Thunder ADC, CGN, CFW
- Eliminates manual interventions, speed response
.
- 256K individual detection policies per appliance scales to thousands of paying tenants
- 3,000 simultaneous mitigation zones per appliance for differentiated services that match the tenant’s risk profile and budget
- Zero-touch Intelligent Automation maximizes effectiveness of limited staff and reduces Opex
- 30 times more profitable over legacy DDoS defense platforms
Key Features of Thunder TPS
Zero-day Automated Protection
- Expert system calculates blocking filters in real-time
- Fast, automated response
- No pre-configuration or manual intervention
- Automatic heuristics-based anomalous behavior blocking
Precision
- Industry’s only 5-level adaptive policy escalation that minimizes damage to users
- Machine learning powered zero-day attack protection
- Actionable DDoS weapons intelligence at Internet scale
- Fast 100 ms mitigation intervals
Industry Leading Performance
- Highest performance density per RU – 220 Gbps in a single RU form factor
- Highest packet processing in a single appliance – 440 Mpps, 300 Gbps
- 6M fps flow-based detector (22x the competition)
- 3,000 active Zones for building scalable DDoS scrubbing services
Management & Analytics
- Single real-time dashboard for multiple Thunder TPS devices
- Intelligent service discovery with automatic mitigation policy assignment
- Instantly create and adjust countermeasures
- Live visualization and geolocation tracking
One-DDoS Protection
- Unique approach to full-spectrum multi-vector DDoS defense
- Integration with distributed detection capabilities in Thunder ADC, Thunder CGN and Thunder CFW
- Application DDoS protection that requires no special training for app and server team
DDoS Threat Intelligence
- Over three dozen security intelligence sources to instantly recognize and block malicious traffic
- Up to 96M-entry class list for proactive blocking of toxic IP addresses
- Intelligence feed updates as often as every 15 mins
Additional Options
Flexible and robust Distributed Denial of Service (DDoS) protection, with a wide range of hardware and software deployment models to meet your exact needs.
High precision, automated DDoS mitigation solution is delivered as hardware or virtual appliances ranging from 1 Gbps to 500 Gbps.
High-performance Netflow, Sflow, IPFIX-based DDoS detector for a complete reactive DDoS defense solution. Available as a standalone appliance or integrated with aGalaxy 5000.
Enables organizations to gain a global view of their environments to rapidly identify and remediate DDoS attacks and ensure that policies are consistently enforced from a central point
Leverages a weaponry inventory based on active intelligence and dynamically applies it to create blacklists with millions of toxic IP addresses.
Full-spectrum DDoS protection with distributed detection capabilities integrated across key network elements including A10 Networks Thunder ADC, CGN and CFW. These capabilities provide the context, packet-level granularity and visibility needed to thwart today’s sophisticated targeted attacks.
Combine globally distributed DDoS cloud scrubbing service with Thunder TPS on-premise for large volumetric, network, application and slow-and-low attacks protection.
Network Integrations
Simple, seamless integration into your existing network infrastructure for on-demand reactive, always-on proactive, hybrid DDoS, and distributed detection with One-DDoS Protection deployment options.
BGP, ISIS, OSFP, GRE, VXLAN protocols for seamless integration into your environment
100% REST API coverage of all functionality
Thunder TPS flow-based detector and 3rd party detector integration: Flowmon, Kentik, Flowtraq, Deepfield
Role-based access and authentication with LDAP, RADIUS and TACACS+
SPEC OF THUNDER TPS PHYSICAL APPLIANCE
SPEC OF VIRTUAL THUNDER TPS
