Overview

While botnets were well-intended at the time of their development, the modern botnet has become a main DDoS instrument of attack, as it is very difficult to effectively block. Most anti-DDoS devices available on market detect botnets based on statistics, which requires accumulating results over a certain time frame. Unfortunately, this causes a slow reaction time. It is also unfortunate that, quite often, legitimate users can be blocked due to high false-positives.

With the scale of botnets increasing, it has become more and more challenging for data centers and specialized anti-DDoS service providers to develop an efficient solution. Very often, data centers have to put the IP addresses of attacked servers on null routes to save bandwidth. Existing devices can hardly detect smart botnets, which usually require an experienced system administrator to analyze log files and manually block them at firewall. It has almost become “mission impossible” to withstand mid to large level botnets attacks without impacting normal services.

LiteSpeed’s web server itself has bandwidth and connection throttling and a small memory footprint, which combined can slow down and block botnets. Many users, even specialized anti-DDoS service providers, turn to LiteSpeed web server as part of their DDoS mitigation stack.

Based on years of real-world experience dealing with various DDoS attacks for our clients, we have put great efforts into analyzing different attack patterns and developed a sophisticated algorithm that can detect all kinds of botnets with human intelligence, and can accurately and promptly detect and block botnets with minimal false positives.

LiteSpeed Anti-DDoS Appliance is a separate device with intelligent logic built-in, and can sit in front of any web platform. It can be used by data centers and specialized web hosts that provide anti-DDoS service. End users can now enjoy LiteSpeed protection with peace of mind and without worrying about upgrading or changing their existing infrastructures. In addition, you’ll see an instant boost in your site performance, as LiteSpeed Anti-DDoS Appliance has a high-performance, built-in cache.

Features

• Instantly detects and blocks botnet robots with minimal false-positives.
• A single device can handle up-to 10Gbps traffic.
• Multiple devices can achieve transparent fail-over with High-Availability set-up.
• Serves as a Content Accelerator through built-in cache and also as aload balancer to multiple backend servers.
• Detects any script-based or non-browser botnet attacks.
• Detects SYN flood.
• Allows customization of detection filter by using rewrite rules with maximum flexibility.