Internet Exchange Points: increasingly important online security tools

The role of Internet Exchange Points (IXPs) in guaranteeing the quality, security and performance of the net is becoming increasingly essential. These infrastructures have already been operating for some years and form a crucial part of the complex system which permits data exchange among different ISPs (Internet Service Providers).

The recent pandemic has forced companies and individuals to use telecommunications on a much larger scale, both for work and pleasure, leading to an exponential rise in online traffic. This has placed more focus on the importance of IXPs and the need to build new connections to improve navigation performance levels.

What are Internet Service Points and what functionalities do they offer?

Internet Service Points (or Internet exchange points) provide physical access to the network. The many ISPs operating in Italy use them to connect their respective autonomous networks, allowing users to exchange traffic faster and more securely. The implementation of this technology enables a reduction in the use of third parties (upstream providers) who are notoriously more at risk of breaches.

In order to guarantee minimum latency, Internet Exchange Points are usually located in major Italian cities, but the increase in demand for bandwidth and the considerable increases in traffic recorded in recent years have made it clear that more need to be built. The main advantages that distinguish them are summarised as follows:

• high speed data exchange;
• a reduction in latency;
• improved error tolerance;
• better routing efficiency;
• increased bandwidth.

The physical infrastructure of internet exchange points consists of a high speed network Ethernet switch which, thanks to a peering agreement shared by all ISPs, is able to direct the traffic which arrives from the various providers.

ISPs also have the option to choose whether they carry data towards their own addresses or those belonging to other providers (a particularly useful functionality in cases of direct connection error, as it ensures the data exchange continuity).

The role of Internet Exchange Points in fighting DDoS attacks

Among the principal IT security problems that companies find themselves dealing with nowadays are so-called DDoS or Distributed Denial of Service attacks, which involve the forced interruption of a website’s services.

This kind of attack is carried out by flooding the portal with requests in a very short space of time. This causes such a sudden peak in traffic, that it proves unmanageable for the servers, with the result that many of the site’s web pages become inaccessible.

In contrast with a hacker attack (which is basically a straightforward breach), the purpose of the DDoS is to paralyse a whole series of IT systems, types of web portal, servers, distribution networks, data centres etc.

In such cases, Internet Service Points can make the difference, as they are equipped with backholding mechanisms. This efficient tool can intercept the traffic which passes through the IXP (around 15-20%), on its way to the portal under attack, thereby limiting the damage.

Some specific providers belonging to the same ecosystem as Internet Exchange Points, supply services known as ‘washing machines’. Their function is to separate the legitimate requests from the illegitimate ones and to further alleviate the load on the server being targeted.

Considering that a less vulnerable network offers greater reliability, the installation of new IXPs in the near future will help to guarantee even better performance and connections (including international ones) which are genuinely able to satisfy users’ requirements.