Radware DefensePro X10 是业界领先的实时边界DDoS攻击缓解设备,可保护企业免受新兴的网络多向量DDoS攻击、IoT僵尸网络洪水、应用漏洞利用及恶意软件等各类网络威胁。DefensePro X 采用经过验证的行为学检测技术与机器学习算法,无需人工干预即可自动识别并缓解未知的零日攻击,在攻击期间保障合法用户体验,并将误报率降至最低。
Radware DefensePro X 是业界领先的实时边界DDoS攻击缓解设备,可保护企业免受新兴的网络多向量DDoS攻击、IoT僵尸网络洪水、应用漏洞利用及恶意软件等各类网络威胁。DefensePro X 采用经过验证的行为学检测技术与机器学习算法,无需人工干预即可自动识别并缓解未知的零日攻击,在攻击期间保障合法用户体验,并将误报率降至最低。其专利保护的实时攻击特征技术可在10秒内自动生成攻击签名并完成防护,配合智能挑战应答机制实现极高的缓解精度。
DefensePro X 支持无密钥TLS洪水缓解,无需解密全部TLS流量即可防御加密型DDoS攻击,既不增加通信时延,又充分保护用户隐私,可有效抵御突发攻击(Burst)、DNS放大攻击、地毯式轰炸攻击及3-7层各类洪水攻击。全系列提供从10Gbps到800Gbps的缓解容量,涵盖硬件设备与虚拟化设备(XVA),支持串联、旁路监测及引流清洗中心等多种部署模式,并可与Radware云DDoS防护服务组成混合防护方案,通过统一的Cyber Controller仪表盘实现攻击生命周期的集中可视化管理。
1、Radware DefensePro X 系列硬件技术参数
| 型号 | 最大可授权吞吐量 | DDoS泛洪攻击防护速率 | 每秒SSL/TLS连接数 | 主要检测端口 | 外形规格 | 功耗 |
| DefensePro X10 | 10 Gbps | 14 Mpps | 43 KCPS | 最多16×10/100/1000M电口(模块化) + 最多8×10/25G SFP+(模块化) | 1U | 140W |
| DefensePro X20 | 20 Gbps | 14 Mpps | 43 KCPS | 最多16×10/100/1000M电口(模块化) + 最多8×10/25G SFP+(模块化) | 1U | 140W |
| DefensePro X40 | 40 Gbps | 35 Mpps | 95 KCPS | 12×1/10G SFP+ + 6×40G QSFP+ | 2U | 400W |
| DefensePro X50 | 50 Gbps | 45 Mpps | 100 KCPS | 最多24×10/25G SFP+(模块化) + 最多6×40G QSFP+(模块化) | 1U | 350W |
| DefensePro X50HP | 50 Gbps | 200 Mpps | 100 KCPS | 最多24×10/25G SFP+(模块化) + 最多6×40G QSFP+(模块化) | 1U | 350W |
| DefensePro X80 | 80 Gbps | 35 Mpps | 95 KCPS | 12×1/10G SFP+ + 6×40G QSFP+ | 2U | 400W |
| DefensePro X90 | 90 Gbps | 45 Mpps | 100 KCPS | 最多24×10/25G SFP+(模块化) + 最多6×40G QSFP+(模块化) | 1U | 350W |
| DefensePro X90HP | 90 Gbps | 200 Mpps | 100 KCPS | 最多24×10/25G SFP+(模块化) + 最多6×40G QSFP+(模块化) | 1U | 350W |
| DefensePro X100 | 100 Gbps(最大阻断吞吐 800 Gbps) | 142 Mpps | 150 KCPS | 24×SFP+/SFP28 + 8×QSFP+/QSFP28 | 2U | 550W |
| DefensePro X200 | 200 Gbps(最大阻断吞吐 800 Gbps) | 142 Mpps | 150 KCPS | 24×SFP+/SFP28 + 8×QSFP+/QSFP28 | 2U | 550W |
| DefensePro X110 | 110 Gbps(最大阻断吞吐 800 Gbps) | 530 Mpps | 110 KCPS | 24×SFP+/SFP28 + 8×QSFP+/QSFP28 | 2U | 550W |
| DefensePro X220 | 220 Gbps(最大阻断吞吐 800 Gbps) | 530 Mpps | 110 KCPS | 24×SFP+/SFP28 + 8×QSFP+/QSFP28 | 2U | 550W |
| DefensePro X380 | 380 Gbps(最大阻断吞吐 800 Gbps) | 530 Mpps | 110 KCPS | 24×SFP+/SFP28 + 8×QSFP+/QSFP28 | 2U | 550W |
| DefensePro X400 | 400 Gbps(最大阻断吞吐 3.4 Tbps) | 1,119 Mpps | 200 KCPS | 18×100G QSFP28 + 4×400G QSFP-DD | 2U | 970W |
| DefensePro X800 | 800 Gbps(最大阻断吞吐 3.4 Tbps) | 1,119 Mpps | 200 KCPS | 18×100G QSFP28 + 4×400G QSFP-DD | 2U | 970W |
| DefensePro XVA (私有云虚拟版) | 单实例最高 100 Gbps | 每vCPU最高 950,000 pps | N/A | 10/25/40/100GE(Intel网卡 PCI直通或SR-IOV) | 虚拟设备,部署于(KVM / VMware ESX / OpenStack) | N/A |
| DefensePro XVA (公有云虚拟版) | 单实例最高 25 Gbps | 每vCPU最高 500,000 pps | N/A | 典型部署使用1–2个检测端口；可增加检测端口，上限取决于云实例类型。 | 虚拟设备,原生运行于公有云(AWS / Azure) | N/A |
全系列共有参数：攻击并发会话数不设上限；处理时延低于60微秒；实时攻击签名可在10秒内完成检测并启动防护（XVA为18秒内）；支持TLS 1.3完美前向保密（PFS）硬件加速；提供串联（Inline）、SPAN/Copy端口监测、旁路引流清洗（Out-of-Path）等多种部署模式；全面支持VLAN Tagging、L2TP、MPLS、GRE、GTP、IPinIP隧道协议及IPv6；硬件型号均标配双热插拔冗余电源；XVA虚拟版最低资源要求为2 vCPU、21GB内存、10GB存储。
2、Radware DefensePro X 系列产品订购信息
| 产品型号 | 官方产品描述 |
| DefensePro X10-05 | DefensePro X10 platform, 500 Mbps on-demand scalable clean throughput license |
| DefensePro X10-1 | DefensePro X10 platform, 1 Gbps on-demand scalable clean throughput license |
| DefensePro X10-2 | DefensePro X10 platform, 2 Gbps on-demand scalable clean throughput license |
| DefensePro X10-5 | DefensePro X10 platform, 5 Gbps on-demand scalable clean throughput license |
| DefensePro X20-5 | DefensePro X20 platform, 5 Gbps on-demand scalable clean throughput license |
| DefensePro X20-10 | DefensePro X20 platform, 10 Gbps on-demand scalable clean throughput license |
| DefensePro X40-10 | DefensePro X40 platform, 10 Gbps on-demand scalable clean throughput license |
| DefensePro X40-20 | DefensePro X40 platform, 20 Gbps on-demand scalable clean throughput license |
| DefensePro X40-40 | DefensePro X40 platform, 40 Gbps on-demand scalable clean throughput license |
| DefensePro X50-10 | DefensePro X50 platform, 10 Gbps on-demand scalable clean throughput license |
| DefensePro X50-20 | DefensePro X50 platform, 20 Gbps on-demand scalable clean throughput license |
| DefensePro X50-40 | DefensePro X50 platform, 40 Gbps on-demand scalable clean throughput license |
| DefensePro X50HP-10 | DefensePro X50HP platform, 10 Gbps on-demand scalable clean throughput license |
| DefensePro X50HP-20 | DefensePro X50HP platform, 20 Gbps on-demand scalable clean throughput license |
| DefensePro X50HP-40 | DefensePro X50HP platform, 40 Gbps on-demand scalable clean throughput license |
| DefensePro X80-10 | DefensePro X80 platform, 10 Gbps on-demand scalable clean throughput license |
| DefensePro X80-20 | DefensePro X80 platform, 20 Gbps on-demand scalable clean throughput license |
| DefensePro X80-40 | DefensePro X80 platform, 40 Gbps on-demand scalable clean throughput license |
| DefensePro X90-10 | DefensePro X90 platform, 10 Gbps on-demand scalable clean throughput license |
| DefensePro X90-20 | DefensePro X90 platform, 20 Gbps on-demand scalable clean throughput license |
| DefensePro X90-40 | DefensePro X90 platform, 40 Gbps on-demand scalable clean throughput license |
| DefensePro X90HP-10 | DefensePro X90HP platform, 10 Gbps on-demand scalable clean throughput license |
| DefensePro X90HP-20 | DefensePro X90HP platform, 20 Gbps on-demand scalable clean throughput license |
| DefensePro X90HP-40 | DefensePro X90HP platform, 40 Gbps on-demand scalable clean throughput license |
| DefensePro X100-50 | DefensePro X100 platform, 50 Gbps on-demand scalable clean throughput license |
| DefensePro X100-60 | DefensePro X100 platform, 60 Gbps on-demand scalable clean throughput license |
| DefensePro X200-100 | DefensePro X200 platform, 100 Gbps on-demand scalable clean throughput license |
| DefensePro X110-50 | DefensePro X110 platform, 50 Gbps on-demand scalable clean throughput license |
| DefensePro X220-100 | DefensePro X220 platform, 100 Gbps on-demand scalable clean throughput license |
| DefensePro X380-200 | DefensePro X380 platform, 200 Gbps on-demand scalable clean throughput license |
| DefensePro X400-200 | DefensePro X400 platform, 200 Gbps on-demand scalable clean throughput license |
| DefensePro X800-380 | DefensePro X800 platform, 380 Gbps on-demand scalable clean throughput license |
| DefensePro XVA (Private Cloud) | DefensePro VA virtual appliance for private clouds (KVM / VMware ESX / OpenStack), on-demand scalable throughput licenses: 200 Mbps / 500 Mbps / 1 Gbps / 2 Gbps / 5 Gbps / 10 Gbps / 20 Gbps / 40 Gbps / 100 Gbps (20G/40G/100G supported on KVM) |
| DefensePro XVA (Public Cloud) | DefensePro VA virtual appliance for public clouds, native support for AWS and Azure, up to 25 Gbps mitigation capacity per instance, In-VPC or Security VPC deployment, Active:Active high availability with AWS Gateway Load Balancer and Azure Load Balancer integration |
| Network Protection Silver (NS) | Network Protection Silver subscription: Security Update Subscription (SUS), ERT Active Attackers Feed (EAAF) & Location Based Mitigation (GeoIP) |
| Network Protection Gold (NG) | Network Protection Gold subscription: Network Protection Silver (SUS, EAAF, GeoIP) plus ERT Under Attack service |
| Application Protection (A) | Application Protection subscription: advanced behavioral protection for encrypted floods, TLS inspection, application aware protection, ERT threat intelligence under attack |
注:1) DefensePro X 设备需搭配网络防护订阅(Network Protection Silver 或 Gold 二选一)使用,可另行叠加应用防护(Application Protection)订阅,获得针对加密洪水与应用层威胁的高级行为学防护。2) 标准保修为1年硬件与软件维护(Certainty Support Program)。3) 具体订购SKU及价格请以Radware官方渠道报价为准。
