Good Providers for 1Gb line - Builtin DDOS

[2097]

Our current BT line with DDOS protection has unfortunately been outgrown.

 

We are now looking for a 1gbit line , Built in DDOS with 0 sec downtime ( our BT package currently has around 1min before the DDOS traffic is mitigated )

 

Schoolsbroadband gave us a really good quote and apparently their fortigate firewalls are very good

 

We dont need Filtering as we already have smoothwall in house

 

Any other recommendations ? BT is no longer an option for our main line due to the costing of 1gb+ connection and a DDOS service which is too expensive for a higher package.

 

We are outter London if that helps . We would also require a new leased line ran into the school as we are currently on a 100mbit bearer

[ultimatepie]

USE https://exa.net.uk, awesome,

[paulkerton]

@Wave9_Lee will be able to help you

 

Schoolsbroadband gave us a really good quote and apparently their fortigate firewalls are very good

I'd recommend against that particular company myself.

Edited April 27, 2022 by paulkerton

[thebatman]

Have you looked at LGfL?

[paulkerton]

Have you looked at LGfL?

They don't provide line only services, last time I spoke to them. You had to take all of the additionals they bundled and weren't able to unbundle anything.

[SchoolsBroadband]

Hi there,

 

thanks for considering us.

 

On top of our Fortigate firewalls we also use Corero Smartwall Anti-DDoS protection for all of our customers free of charge which further enhances our offering against volumetric and application attacks. Most other providers charge for this kind of service but we include FOC in our packages and its been highly successful at mitigating attacks since we installed it some years ago.

 

Thanks

 

Dave

 

 

 

Our current BT line with DDOS protection has unfortunately been outgrown.

 

We are now looking for a 1gbit line , Built in DDOS with 0 sec downtime ( our BT package currently has around 1min before the DDOS traffic is mitigated )

 

Schoolsbroadband gave us a really good quote and apparently their fortigate firewalls are very good

 

We dont need Filtering as we already have smoothwall in house

 

Any other recommendations ? BT is no longer an option for our main line due to the costing of 1gb+ connection and a DDOS service which is too expensive for a higher package.

 

We are outter London if that helps . We would also require a new leased line ran into the school as we are currently on a 100mbit bearer

[2097]

Thanks everyone for the suggestions

 

Does Wave9 and Exa offer Inline DDOS protection ?

[howartp]

We had DDoS ongoing for 5-6 weeks last year, on Exa.

 

I've not heard of this DDoS protection but it took between 10 minutes and 2 hours of phone calls to various support people to put a sinkhole in place on our (receiving) IP address to kill the DDoS each time.

 

They didn't offer any automatic solution despite high-level letters between the two companies.

[Wave9_Lee]

Our Wholesale partners have multiple methods of DDoS protection and the Sophos Firewalls we offer also include protection - however there is no single answer. Ability to mitigate is impacted by the amount of traffic, your upstream peers, bandwidth etc. Even with core 'appliances' if the upstream transit provider (which everyone uses) is sending your ISP the malicious traffic in enough quantity, it will be a problem. In addition in automated protection, there's the risk of valid traffic being dropped. We've found the best mitigation is the simplest - multiple IP addresses and active/active internet connections through 2 separate ISPs. In our experience most attacks are against RBC/ISP where a limited number of IP addresses are used for many many subscribers, and a lot of providers architect their networks this way (so you are almost a LAN extension, rather than having a true internet IP address). This gives malicious actors more bang for their buck. We rarely see DoS/DDoS attacks against our customers for this reason, perhaps 2/3 a year (compared to hundreds when running RBCs). Where attacks do get through, we can usually identify the perpatrator (usually disgruntled pupil) as we manage the firewalls for most of our customers networks.

 

The new DFE guidelines state that a second connection is preferred, and as we provide the second link to a totally different network, this is very effective.

 

I'd be happy to provide a quote anytime, cheers

[2097]

So our current BT situation is that the DDOS protection does actually work , our line is only 100mbit so doesnt take a lot for a DDOS to consume us !

 

I have managed to catch every DDOS attacker so far ! but i have found that as they are normally kids they tend to use the "Free" booters that gives them 5 mins of DDOS attacks . This is quite annoying considering it takes 1 min for the automatic ddos protection to kick in .

 

Unfortunately with us BT is too expensive with a higher speed internet connection and the "Gold" service DDOS protection

[localzuk]

I think there's a need to recognise that not all DDoS attacks are the same, and not all mitigation techniques work for all types. It is also worth recognising that some things ascribed to "DDoS" are not in fact DDoS attacks at all, but simply DoS - from a single source etc.

 

Basically, YMMV with anti-DDoS solutions. And any solution is going to have a time delay between the attack starting and the solution kicking in - the system has to have enough traffic come through for it to flag up as an attack at all. The shorter that delay, the more likely you're going to have false positives and find legitimate traffic being black holed.

[exa_nicky]

We had DDoS ongoing for 5-6 weeks last year, on Exa.

 

I've not heard of this DDoS protection but it took between 10 minutes and 2 hours of phone calls to various support people to put a sinkhole in place on our (receiving) IP address to kill the DDoS each time.

 

They didn't offer any automatic solution despite high-level letters between the two companies.

 

Exa Networks

Hi 2097,

 

We have DDoS mitigation within our network free of charge, which monitors and logs constant traffic to keep our network and customers safe from attacks. Our support team are happy to discuss how this works with you. We can offer a 1gbit line with a Fortigate VM firewall.

I am the Relationship Manager at Exa Networks, I would be happy to discuss your needs and put together a quote with all the information as you need regarding our DDoS mitigation.

 

Kind Regards

 

Nicky Watkins

Relationship Manager

 

Exa Networks Ltd

100 Bolton Road, Bradford, BD1 4DE

https://exa.net.uk/

DDI: 0203 9232413

Phone: 0345 1451234