How NFV Can Enable 'Pay-as-you-Protect' Network Protection
Elastic scaling of VNFs allows for right-size protection for an attack.
Live network data show the 60,000 flows observed in each five-second interval and detection of the new VNF instance (Figure 6), as well as operation of the Traffic Steering Function. Once the VNF
is online, the TSF balances the attack load between the two available VNF instances.
Fig. 6 – Network data show the 12,000 flows per second-attack used in the second part of the demonstration; the network has automatically detected the new VNF
instance.
This iterative dynamic-scaling approach is easily extensible to DDoS attacks of any size, whether it is the “average first-half-2016” attack of 1Gbps, or the massive attack in the same period that peaked at 579Gbps.
Elastic scaling of VNFs allows for protection that is always the right size for an attack, enabling a brand new “pay-as-you-protect” model that could be much more efficient, cost-effective and highly disruptive to the current economics of network protection.
