Network Update: Multihomed, Increased Transit, Peering
&quot;we now manage our own true service provider network, allowing us to deliver robust and reliable connectivity.&quot;<p>What&#x27;s needed to combat DDoS attacks is distributed defense. Without their own backbone &#x2F; private transport links between all of their locations, their network is just a disparate set of data centres and there is no advantage to their having multiple locations, so far as protection from DDoS attacks are concerned.<p>They also fail to mention what capacity each of the links are. They could be anywhere from 1Gbps to 100Gbps, but I presume they&#x27;d mention as a selling point anything 40Gbps and up, so let&#x27;s assume they&#x27;re using all 10Gbps links and not 1Gbps to give them the benefit of the doubt. So, they range from 50Gbps (Singapore) to 100Gbps (London) per location.<p>It&#x27;s an impressive list to look at in aggregate, but not really that much for any one location in 2016, especially given a company of their size and visibility, when you can rent shared access to a 200Gbps+ botnet for $19.99.
<a href="https:&#x2F;&#x2F;www.nanog.org&#x2F;sites&#x2F;default&#x2F;files&#x2F;20161015_Winward_The_Current_Economics_v1.pdf" rel="nofollow">https:&#x2F;&#x2F;www.nanog.org&#x2F;sites&#x2F;default&#x2F;files&#x2F;20161015_Winward_T...</a><p>Instead of buying transit from up to 7 carriers per location, when there are starkly diminishing returns after 3 or 4 so far as routing performance is concerned, they should have instead bought higher capacity to each provider (to ensure at least 10Gbps of unused capacity per provider outside of regular legitimate traffic), external DDoS mitigation, or domestic backbone links and turned up more capacity at the LA Any2 (for Asia) and NYIIX (for Europe) to absorb the majority of DDoS traffic which comes from those regions. With up to 7 carriers, they simply have 7x different points of failure each at only 10Gbps, while getting worse deals on transit pricing due to lower volumes with each provider.