DDOS MITIGATION SOP

In the current era of digital transformation, organizations are striving to integrate into a hyperconnected ecosystem. However, a significant and growing threat to global enterprises has emerged in the form of Distributed Denial of Service (DDoS) attacks. In recent times, these DDoS attacks have escalated in scale, frequency, and sophistication.

We are now facing hyper-volumetric DDoS campaigns characterized by unprecedented data throughput and multi-vector attack strategies. These attacks are reaching peaks of 1.9 terabits per second and employ a range of techniques, including UDP fragment floods, UDP/Echo floods, SYN floods, ACK floods, and TCP malformed flag attacks.

To preserve network availability across our entire service portfolio—spanning colocation, managed and unmanaged services, public cloud, private cloud, and hybrid environments—we are compelled to make strategic decisions that prioritize the continuity of the majority of our services. These network and cybersecurity measures include isolating the affected IP subnets to a specific ISP, diverging from a multihomed configuration, or implementing rate limits on impacted IP addresses to mitigate bandwidth pressure.

While these actions are essential to sustaining overall service availability, they may result in intermittent outages for the targeted subnet until the DDoS attack subsides.