High-Speed 3D Filament Extrusion Line,Precision 3D Filament Extrusion Line,Customizable 3D Filament Extrusion Line,Advanced 3D Filament Extrusion Line Technology Zhejiang IET Intelligent Equipment Manufacturing Co.,Ltd , https://www.ietmachinery.com
Iron Flower joined Alibaba in 2006 and began focusing on security-related work in 2008. He was instrumental in establishing the first Software Development Lifecycle (SDL) for Taobao, as well as developing the first generation of web security solutions and the underlying development framework. He also played a key role in creating a secure static code scanning platform. Later, he took charge of the overall service team and technical business security for the Wireless division. Additionally, he was one of the main architects behind the internal IM instant messaging cloud platform. Currently, Iron Flower is responsible for building the safety technology platform product system and driving the development of foundational security measures. His focus includes the medium-sized construction of safety technology products, the establishment of infrastructure systems, and ensuring security during major group events.
Traffic cleaning, also known as Anti-Malicious Network Traffic, refers to the process of filtering all network traffic that accesses services at the network layer. The goal is to remove malicious or unnecessary traffic, leaving only legitimate requests to reach the business system. This ensures that the traffic reaching the system is free from external attacks and non-human malicious activities. In terms of application scenarios, traffic cleaning should cover DDoS protection, CC attack mitigation, web attack prevention, detection of bot behavior, service security, and traffic rate limiting. However, traditional traffic cleaning solutions often involve deploying numerous security products across the entire service chain, which can lead to issues such as high maintenance costs, limited protection capabilities, and potential data loss.
According to Iron Flower, the seven-layer traffic cleaning platform introduces several new features compared to current malicious traffic cleaning systems. First, it focuses on refining specific scenarios rather than just targeting individual technical points. Attacks are now more complex and occur within specific contexts, so the defense platform must be tailored for different similar scenarios. Second, full-link data is integrated, including data from the client, network connection layer, and service layer, enabling comprehensive analysis and algorithm modeling for optimal results. Third, the system is becoming more intelligent, with some platforms already capable of automatically adjusting and executing defenses based on real-time conditions.
For common malicious traffic like DDoS attacks and malicious vulnerability scans, the industry typically relies on anti-DDoS systems, WAFs, and firewall products. However, Alibaba takes a more advanced approach by intelligently handling malicious traffic at the network layer through vertical and horizontal scene data analysis, effectively countering threats from black and gray hat operations.
I have a few Aliyun lucky vouchers to share with you! When you purchase or upgrade Alibaba Cloud products using these coupons, you'll unlock special surprises. Don't miss out—grab the coupons for the products you want to buy today and get started quickly. You might just be the next lucky winner!
Recent Application Results
Currently, the seven-layer traffic cleaning system is responsible for all network-layer traffic cleaning and protection across the Alibaba Group. During the 2017 Double 11 event, it successfully handled a peak traffic load of 20 million QPS, ensuring that over 99.85% of the traffic reaching the core trading system was clean and legitimate.
"This year's Double 11 was the smoothest and most efficient in recent years. It's definitely not due to one single system or platform," said Tiehua. "A safe business environment requires careful coordination between online and offline systems, and a comprehensive consideration of all aspects of the business—from end to end. A stable and reliable system is essential to achieving such success."
Functional and Technical Insights
Thanks to Alibaba's complex and rapidly evolving business environment, building a corresponding security system has been both challenging and rewarding. The system must not only meet current business needs but also anticipate future demands while maintaining a balance between security, performance, and user experience. This ongoing effort reflects the company's commitment to innovation and resilience in the ever-changing digital landscape.