Modernizing Authentication — What It Takes to Transform Secure Access
Akamai announced this morning its intention to acquire privately-held security vendor Prolexic Technologies for $370 million. The deal is expected to close in the first half of 2014 and will bring new data center Distributed Denial of Service (DDoS) capabilities to Akamai.
Akamai is perhaps best known for its content delivery network (CDN) capabilities that enable it to accelerate Web traffic. In recent years, Akamai has increasingly been leveraging its CDN as a way to deliver security services as well. The Akamai Kona service is a DDoS prevention system, though it has been limited to protecting Web applications only. In an analyst call to discuss the Prolexic deal, Akamai's CEO Tom Leighton explained how Prolexic's DDoS technology is different than what Akamai had been offering.
"Prolexic focuses on the data center and the IP space, and they go beyond the Web and go into enterprise applications that aren't Web applications and they actually protect the data center," Leighton explained. "Akamai doesn't defend the data center; Akamai defends the Web application."
Many large enterprises need to defend more than just their Web applications, which is where Prolexic fits the bill, Leighton said. From a technology perspective, Akamai has been providing its DDoS technology by way of the domain name server's CNAME record, which points a Web domain to the proper IP address. Akamai customers direct their CNAME traffic to its service in order to filter and protect against malicious traffic. An attacker could potentially also go after the data center directly, Leighton said, which is not something Akamai's existing technology would be able to properly block.https://o1.qnsr.com/log/p.gif?;n=203;c=204634421;s=15939;x=7936;f=201702151714490;u=j;z=TIMESTAMP;a=20304455;e=i
"Prolexic directs traffic via the Border Gateway Protocol (BGP) at the routing layer," Leighton said. "Once that happens, attack traffic aimed at the data center gets directed to Prolexic's scrubbing centers, and that's where it gets cleaned up and only the good traffic gets through to the data center."
The Cloud Edge
From a technology integration standpoint, Leighton sees a lot of synergies in the combined offering. It won't be a big challenge to integrate the Prolexic technology with Akamai's existing services, as the two companies already have several joint customers, he said. Thanks to the joint customer engagements, the integration work is mostly done and the two sets of technologies work well together.
The joint Akamai/Prolexic solution offers cloud-based DDoS protection, which Leighton said will give it an edge over competitors. With the growth in attack traffic bandwidth, Leighton said hardware-based solutions no longer offer adequate protection. Akamai reported earlier this year that DDoS attack traffic surged by over 200 percent in 2012.
Sean Michael Kerner is a senior editor at eSecurity Planet and InternetNews.com. Follow him on Twitter @TechJournalist.