Case Study: CENGN achieves validated multi-vector DDoS mitigation in hybrid networks with Keysight CyPerf

Tech Consortium Proves Next-Gen DDoS Defense Tool with CyPerf

CENGN needed to validate a client’s hybrid-cloud DDoS mitigation solution in a live, distributed network without risking production systems. To emulate realistic malicious and application traffic across physical and cloud infrastructure, CENGN used Keysight’s CyPerf cloud-native traffic generator to reproduce complex, bidirectional attack profiles and ensure the mitigation system could be safely tested at scale.

Keysight’s CyPerf—an agent-based, cloud-native traffic generator—was used to create digital twins of users, apps, and threats and run more than 20 test cases across five DDoS vectors. Results showed the client’s tool detected and mitigated every simulated threat: 961,506 TCP connection attempts were identified and dropped, 17,791 malformed HTTP requests were blocked, over 8 million connection attempts were used to verify 100% block-list filtering, 9.7 million spoofed UDP packets were detected, and 940 HTTP reflection/amplification attacks were neutralized. Keysight’s CyPerf enabled CENGN to validate performance parameters and give the client confidence to deploy the solution in production.

Centre of Excellence in Next Generation Networks (CENGN)

Wei Yang

Cloud Infrastructure Engineer,