The Arbor Peakflow SP solution enables network operators to manage and secure IPv6 traffic, along with traditional IPv4 traffic, by providing cost-effective visibility and DDoS protection across the entire network.

Leveraging the IP flow technology that’s embedded in existing network equipment, Peakflow SP builds a model of normal IPv6 and IPv4 traffic behavior. It then alerts operators of significant changes in the network due to new peering relationships, DDoS attacks, misconfiguration, equipment failure or the long-term effects of shifting traffic.

Those actively deploying IPv6 traffic can:
• Detect DDoS for IPv6, as well as for IPv4.
• See how IPv6 traffic is growing in general and in relation to IPv4 traffic.
• Monitor the level of native IPv6 traffic being reported across the network as they build out infrastructure support for IPv6.

Those not actively deploying native IPv6 traffic can:
• Identify tunneled IPv6 traffic that may be operating "under the radar" of traditional network monitoring and filtering.
• Learn more about their potential "market" for native IPv6 functionality by analyzing the traffic levels reported for tunneled IPv6 traffic.
• Discover the amount of unclassified IPv6 traffic transiting their network via IPv6 tunnels.
• Gain insight into tunneled IPv6 traffic information to design engineering solutions that reduce the amount of tunneled IPv6 traffic across the network.

IPv6 Visibility Features of Peakflow SP
Peakflow SP provides IPv6 visibility and reporting features that can help network operators manage both native and tunneled IPv6 traffic on their networks. These features offer snapshots of IPv6 traffic from the following perspectives:

• The entire network
• An application
• A customer, peer or profile managed object
• A router
• An interface

DDoS Attack Detection Features in Peakflow SP
Since its inception, Peakflow SP has been able to analyze IP flow data for threat detection on IPv4-based networks. Today, Peakflow SP uses the same industry-leading misuse and profiled anomaly detection capabilities to uncover DDoS attacks on IPv6-based networks. After detecting malicious threats, it alerts network operators via dashboards. Network operators can drill into each alert for more detail, analyze the details, and take corrective action to mitigate attacks.