Columbia Wireless, an Internet Service Provider based in Canada, has addressed the problem of DDoS attacks by deploying Corero’s SmartWall DDoS Protection solution.
Columbia Wireless is a high-speed Internet Service Provider (ISP) delivering connectivity throughout British Columbia, Canada.
The company experienced a Distributed Denial of Service (DDoS) attack that saturated its upstream provider links, effectively bringing down its network service for all customers for about one hour in the middle of a business day. The company had never experienced such an attack before and was caught completely off guard.
Columbia lost some large clients because of this and it earned it a bad reputation for low reliability. Customers even expressed that they thought the company didn’t know what it was doing, in the form of emailed responses to the impact of the DDoS attacks.
Following the first attack, Columbia Wireless lost approximately 25% of its business. In addition, there was no way to measure how many prospective customers stayed away from the ISP because of word about the DDoS attacks and the service outages they created.
When the attacks occurred, the ISP’s only recourse was to use a time-consuming, manual process to try and stop the impact. It had many users that were being impacted and struggled to find the one IP address that was being targeted. With no automated DDoS attack protection in place, this was a virtually impossible task.
IT staff had to painstakingly scan its network connections looking for patterns that would indicate the particular IP address that was getting attacked the most. Once identified, they had to enable ‘blackhole advertisements’ of the IP address being attacked, notifying upstream carriers to stop all traffic to that destination.
“That would stop the upstream carrier saturation, so the rest of our network would not lose Internet service,” said Ben Leslie, CEO at Columbia Wireless.
“Of course, that meant the owner of the attacked IP address was still completely offline for the duration of the attacks.”
To address the problem of DDoS attacks and the ineffective process it had for dealing with them, Columbia Wireless deployed Corero’s SmartWall DDoS Protection solution.
Among the reasons the ISP selected the platform, over other DDoS offerings, was that Corero is one of the leading and most experienced DDoS solution providers in the market, said Leslie.
The SmartWall family of DDoS protection solutions is designed to mitigate the full range of volumetric attacks while, at the same time, maintaining the availability of the services it’s protecting, by not disrupting the delivery of legitimate network traffic.
SmartWall is capable of handling large network-based DDoS attacks or floods, reflective amplified spoof attacks, and attacks that are typically too low to be detected by traditional out-of-band solutions.
Because the protection system works in real-time and is always-on, it identifies and protects against any attacks which target the network daily. As the majority of DDoS attacks are now relatively small and short in duration but, can still have a big impact on Business Continuity, companies need this type of dedicated, always-on DDoS protection solution to prevent attacks from doing damage.
SmartWall leverages an innovative and automated, multi-stage detection and mitigation pipeline to ensure the highest possible protection. It ensures that legitimate traffic isn’t affected by damaging false positives or any significant increase network latency.
Many alternative DDoS solutions on the market rely on off-site, cloud-based scrubbing technologies and take more than 10 minutes to activate the needed mitigation, Leslie said. By that time, an attack might already have done damage in terms of service downtime. SmartWall handles this on-premises so the process is much faster, drastically reducing the likelihood of service interruptions, he said.
Corero installed the SmartWall DDoS Protection platform within a matter of hours, and after about a week of testing Columbia Wireless had the system running on live traffic. SmartWall is installed between the ISP’s edge routers and its upstream providers’ links.
“We have a failover optical bypass installed with the Corero SmartWall system also so that in the event the SmartWall loses power or suffers a failure, it will failover so traffic can still route,” Leslie said.
Columbia is providing the DDoS protection capability as a value-added offering. “We wanted to make sure our entire network didn’t go down because of one IP on our network having a DDoS attack,” Leslie said.
Since the time the company deployed SmartWall, its network has received about 10 DDoS attacks “and Corero has effectively blocked all of them,” Leslie said.
The technology’s automated email notification system, Leslie’s favourite feature, keeps him informed about attacks on the Columbia Wireless network. This gives him greater visibility than ever into DDoS attacks and their resolution.
“I have seen the Corero SmartWall email me-in plain English-about an attack that it is in the process of blocking, when it caught the attack, what kind of attack it is and what the victim IP was on my network,” Leslie said.
“It also emailed me to let me know when the attack has stopped. I can’t believe how many attacks there are that we didn’t even notice before.”
The system also includes an analytics capability with a graphical interface that lets users view attacks in great detail.
“Basically, it’s a fully automated system that lets me stop thinking and worrying about the next DDoS attack and get back to life and growing my business,” Leslie said. “Among the biggest benefits of SmartWall are its ease of use and reliability.”
Ultimately, all Columbia Wireless clients will benefit from the DDoS-protected network, because such attacks made up about 75% of the company’s overall network outages, and 90% of outages during business hours.