Huawei AntiDDoS8000 can achieve T-class protection performance, second-class attack response speed and over 100 kinds of attacks on the comprehensive defense, providing enterprises with comprehensive professional DDoS protection, protection of enterprise infrastructure and online systems business continuity.
AntiDDoS8000 is a T-class professional DDoS defense system for operators, large enterprises, large data centers and large ICP service providers.
Key Features
T-class performance, second-level response, precision protection, value-added operations
T-class DDoS protection: 1.44 Tbps protection performance, second-level response;
Precise DDoS protection: 60 + traffic model, 100 + protection type;
Value-
added operations: 10 million tenants, customized defensive strategies, customized reports, tenant report self-help Portal
Technical specifications
| model | AntiDDoS8030 | AntiDDoS8080 | AntiDDoS8160 |
| Protection performance | maximum120 Gbps | maximum720 Gbps | maximum1440 Gbps |
| Per slot protection performance | maximum120 Gbps，60 Mpps | maximum160 Gbps，60 Mpps | maximum160 Gbps，60 Mpps |
| Expansion slots | 3 | 8 | 16 |
| size（WxDxH） | 442mm×650mm×175mm（DC，4U）
442mm×650mm×220mm（AC，5U） | 442 mm×650 mm×620 mm（14U） | 442 mm×650 mm×1420 mm（32U） |
Protocol Abuse Class Attack Protection:
LAND, Fraggle, Smurf, Winnuke, Ping of Death, Tear Drop, and TCP Error Flag. | WEBApply protection：
HTTP Get Flood；HTTP Post Flood；HTTP Slow Header；HTTP Slow Post；HTTPS Flood；SSL DoS/DDoS；WordPressReflection amplification attack；RUDY；LOIC；Supports packet validity check。 |
Scanning Spy Attack Protection: Port scanning; address scanning; TRACERT control packet attack; IP source routing option attack; IP timestamp option attack; IP routing record option attacks. | DNSApply protection：
DNS Query Flood；DNS Reply Flood；DNSCache poisoning attack; support source speed limit. |
Network Attack Protection:
SYN Flood；ACK Flood；FIN Flood；RST Flood；TCP fragment Flood；UDP Flood；UDP Fragment Flood；IP Flood；ICMP Flood；TCP connection exhaustion attack; Sockstress; TCP retransmission attack; TCP empty connection attack. | SIPApply protection：
SIP Flood / SIP Methods Flood protection, including: Register Flood; Deregistration Flood; |
UDP reflection amplification attack protection: NTP reflection amplification; DNS reflection amplification; SSDP reflection amplification; Chargen reflection amplification; TFTP reflection amplification; SNMP reflection amplification; NetBIOS reflection amplification; QOTD reflection amplification; Quake Network Protocol reflection amplification; Portmapper reflection amplification; Microsoft SQL Resolution Service reflection amplification; RIPv1 Reflection amplification; Steam Protocol reflection amplification. | Filter function：
IP packet filter, TCP packet filter, UDP packet filter, ICMP message filter, DNS message filter, SIP message filter, HTTP message filter, IP packet filter, TCP packet filter, UDP message filter, ICMP message filter, DNS message filter, SIP message filter, |
Geographic location filtering: Support source IP-based geographical location for blocking, speed limit. |
Attack signature feature: RUDY; slowhttptest; slowloris; LOIC; AnonCannon; RefRef; ApacheKill; ApacheBench; support for automatic weekly updates. | IP reputation function: The world's most active 5 million zombie host, to support daily automatic updates, quick block attacks; support local business access IP reputation, local business access session based on the establishment of dynamic IP reputation, fast forwarding business access traffic and enhance the user experience. |
