DDoS (Distributed Denial of Service) Protection
UQSchoolsNet's DDoS Protection Service, provided by AARNet (Australia's Academic and Research Network), monitors inbound internet traffic through edge routers and automatically detects and mitigates Distributed Denial of Service (DDoS) attacks.
Delivered as part of our internet services, this protection helps safeguard school networks against malicious traffic, supporting reliable and uninterrupted internet connectivity.
A DDoS attack is a malicious attempt to make an online service unavailable by overwhelming it with traffic. DDoS usually uses a network of compromised systems to flood sites with connection requests, causing the website or server to slow down or crash entirely. DDos attacks increased globally by 80% in Q1 2020 compared to Q1 2019, and they continue to rise.
The DDos Protection Service focuses on Layer-4 characteristics of UDP, ICMP & TCP (SYN, RST, PSH/ACK, SYN/ACK):
- Service protection - flood of packets with the same destination port
- Server protection - flood of packets with the same destination IP address
- Reflections - flood of packets with the same source port.
And common DDoS attack methods (including payload inspection):
- DNS query response reflection
- NTP Monlist response
- SSDP reflection
- Empty UDP data
- Memcache attack
- ICMP rules look for a flood of packets with ICMP error messages.
There is no set-up required on customer networks and no disruption to legitimate traffic.
As part of our internet services, the DDos Protection Service will safeguard your internet links from the increasing cyberattacks portrayed.