Thunder TPS

Full Spectrum DDoS Protection for Service Availability

A10 Thunder TPS detects and mitigates broad levels of attacks, even if multiple attacks hit the network simultaneously.

Features

Complete Solution For Flexible Deployments

Thunder TPS DDoS solutions provides a complete solution for DDoS defenses in proactive always-on or on-demand reactive modes to meet their business objectives. Thunder TPS can be deployed in L2 or L3 inpath modes with full IPv4 and IPv6 support. On-demand reactive DDoS detection is facilitated with the collection and analysis of exported flow data records from routers and switches. The Thunder TPS detector applies always-on adaptive learning to build peacetime profiles for protected servers and services, based on 15 flow record traffic indicators to spot anomalous behavior.  When an attack is detected, aGalaxy instructs Thunder TPS to initiate a BGP route redirection for the suspicious traffic.  Then TPS applies the appropriate countermeasures using a progressive auto mitigation level escalation technique before delivering the clean traffic to the intended destination.

Multi-Vector Attack Protection

Detect and mitigate DDoS attacks of many types, including volumetric, protocol, or resource attacks; application-level attacks; or IoTbased attacks. Hardware acceleration offloads the CPUs and makes Thunder TPS particularly adept to deal with simultaneous multi-vector attacks.

Hybrid DDoS Protection

Thunder TPS on-premise protection works in concert with 3rd party cloud-based DDoS scrubbing service to provide full-spectrum protection against attacks of any type. When attacks grow beyond an organization’s bandwidth capacity, cloud mitigation can be initiated automatically by Thunder TPS using BGP based signaling, API, and scripting etc.

ZAP Zero-Day Automated Protection

The ZAP engine utilizes heuristic and machine learning automatically discover mitigation filters without advanced configuration or manual intervention. ZAP speeds the response time against increasingly sophisticated multi-vector attacks while minimizing downtime and errors and lower operating costs.

One-DDoS Protection Layered, Distributed Detection

One-DDoS Protection provides the freshest approach to full-spectrum DDoS defense, placing detection capabilities across key network elements closest to the targeted elements of the infrastructure. This provides the context, packet level granularity, and visibility needed to thwart today’s sophisticated targeted attacks. A10 Thunder ADC, CGN, and CFW with integrated DDoS detectors work in concert with Thunder TPS’ edge f low-based detection and centralized mitigation to enable full spectrum DDoS resilience.

Benefits

• Maintain Service Availability
• Defeat Growing Attacks
• Scalable Protection
• Deploy Wartime Support
• Reduce Security OPEX