Arrcus Routing Security
Secure your internet-facing infrastructure from control plane and data plane attacksInternet routing security at scale
Leverages authentication-based routing to validate the origin of routes received, thereby improving the security of business assets
Provides real-time, deep views of networks and resources with actionable insights to enable network operators to execute data-driven policy decisions
Protects routing infrastructure from malicious attacks and ensures resource availability and business continuity with no performance impact
Control plane security
Reduce the impact of malicious attacks and improve business availability
Internet has a significant impact on the world-wide GDP; so securing internet routing infrastructure is key for the digital economy to thrive. With no means of verifying a route announcement, the trust-based internet routing model is flawed, as evidenced by thousands of routing incidents, from accidental route leaks to malicious route hijackings over the years, clearly outlining the need for a better system for route validation.
RPKI (Resource Public Key Infrastructure) has emerged as a main building block to help secure internet routing by cryptographically verifying route announcements and removing any concerns about where the IP prefixes are originating from.
Leveraging industry-leading software, ArcOS and ArcIQ, Arrcus’s innovative RPKI-based ROV (Route Origin Validation) solution helps customers easily visualize and validate their inter-domain network traffic. The solution comes packaged with the ArcOS router (physical or virtual) or can be deployed on a 3rd-party router, either on-prem or on cloud.
Data plane security
Defend and protect your network’s assets against DDoS attacks
As network architectures become more regional and distributed, DDoS attacks are becoming increasingly prevalent, overwhelming internal network capacities and disrupting businesses. So, edge routers have a crucial role to play to defend against these destructive attacks. First step towards this defense is the detection using flow-based telemetry combined with mitigation at the edge using BGP FlowSpec before the attacks present a serious threat to network infrastructure and service availability.
Leveraging ArcOS and ArcIQ, Arrcus provides the best-of-breed secure data plane network solution to mitigate DDoS attacks using:
- BGP FlowSpec (ArcOS)
- sFlow and telemetry (ArcOS)
- Flow ingestion and alerts (ArcIQ)
Secure internet edge with layered DDoS defense
Internet route security is critical to your network transformation story
Industry’s first Virtualized, Distributed Router