Currently, the most well-known and reputable domestic anti-DDoS firewalls with proven effectiveness are products from Blackhole, Jindun (Golden Shield), and Aodun. Many other so-called “XX Shield DDoS Firewalls” are mostly plagiarized or modified versions of these, or completely ineffective products designed just to make money. We cannot verify the practical application of every product, so cnop can only recommend that you purchase legitimate and professional anti-DDoS firewalls.
The following firewalls are mostly used as hardware firewalls in large enterprises and IDC industry server rooms.
I. Jindun (Golden Shield) Anti-DDoS Firewall
The Jindun Anti-DDoS Firewall is developed by Hefei Zhongxin Software Co., Ltd. It is likely familiar to everyone, especially those in the IDC industry. From what I understand, server rooms like Enkj Technology have installed this firewall.
It is a highly professional firewall developed specifically for ISPs and IDC service providers. Suitable for all enterprise and individual users on the Internet platform, it plays a vital security role, particularly in ensuring network fluency for large entertainment sites and important corporate websites.
The product currently uses the most fundamental driver-level technology, providing comprehensive connection-oriented operations. Through long-term ISP operations and network security research, the company researched and invented a solution to defend against and resist Denial-of-Service attacks. Test results show that the current defense algorithm is immune to all known Denial-of-Service attacks, meaning it can fully resist known DoS/DDoS attacks.
Jindun Anti-DDoS Firewall can defend against a variety of Denial-of-Service attacks and their variants, including various DoS/DDoS attacks such as SYNFlood, TCPFlood, UDPFlood, ICMPFlood, and variants like Land, Teardrop, Smurf, PingofDeath, etc.
During normal use, if abnormal traffic is detected from a specific machine, its IP can be blocked directly on the firewall to ensure the network stability of a specific cabinet or the entire server room.
II. Aodun DDoS Firewall
The well-known brand “Aodun Firewall” from Aodun Security Network is a comprehensive, innovative, high-security, and high-performance network security system. From what I know, server rooms like Jingan currently have it installed. The Aodun DDoS firewall features DDoS and DoS attack defense, NAT address translation, and unique TCP flag bit detection. It features world-leading data flow fingerprint detection technology and an independently developed, high-efficiency system core. It is one of the few domestic security products that can completely defend against ACK, DOS, DDOS, SYN, FLOOD, FATBOY, and various variants like Land, Teardrop, Smurf, PingofDeath, FATBOY. It is dedicated to providing comprehensive information security solutions and full technical support services for large enterprises, government institutions, and network service providers!
Aodun DDoS Firewall Features:
Stops DoS Attacks: Hundreds of types including TearDrop, Land, Jolt, IGMPNuker, Boink, Smurf, Bonk, BigPing, OOB, etc.
Resists DDoS Attacks: All popular DDoS attacks like SYN/ACKFlood, UDPFlood, ICMPFlood, TCPFlood. Rejects Full TCP Connection Attacks: Resource exhaustion attacks from a single IP attempting massive connections to a specific server port.
Prevents Script Attacks: Professionally guards against Flood attacks from ASP, PHP, PERL, JSP, and other scripting programs. Counters DoS Tools: Dozens of them like XDOS, HGOD, SYNKILLER, CC, GZDOS, PKDOS, JDOS, KKDOS, SUPERDDOS, FATBOY, SYNKFW, etc.
Powerful Web Filtering: Filters URL keywords, Unicode malicious encoding, script trojans, prevents trojan uploads. Detects Hacker Intrusions: Intelligently detects and blocks over 2000 hacker intrusion behaviors including Port Scanning, SQL Injection, Password Guessing, Exploit usage, etc.
III. Tianao Firewall
“Tianao Firewall” is currently another domestic provider offering a full-defense security product capable of completely resisting ACK, DOS/DDOS, SYN, FLOOD, FATBOY, CC, drdos, and various variants like Land, Teardrop, Smurf, PingofDeath, FATBOY attacks. Dedicated to providing comprehensive information security solutions and full technical support services for major enterprises, institutions, network service providers, and game operators. The Tianao software-based anti-DDoS firewall uses an algorithm that can employ driver-level packet dropping mode while the system discards millions of attack packets. Discarding millions of attack packets consumes no system resources. Defending against 100M attack traffic, CPU usage will not exceed 3%.
The Tianao hardware firewall is placed independently in front of the switch, protecting all switches and servers connected behind it. The hardware firewall operates in transparent mode, has no IP restrictions, and is plug-and-play. The 100M hardware firewall comes with 6 standard network card interfaces and has no connection limits. The gigabit firewall features four optical-electrical interfaces and 4 network card interfaces.
The following product was not widely endorsed by most network technicians at the time of our writing. The introduction is excerpted from the product developer’s official website, so we cannot guarantee complete accuracy of the information. The material is provided for reader reference only; everyone can make their own judgment based on their understanding.
IV. Blackhole Anti-DDoS Firewall
The Blackhole Anti-DDoS Firewall is a widely used anti-DoS and DDoS attack product in domestic IDCs. Its technology is relatively mature and its protection effect is significant, having gained collective recognition from major IDC organizations. Blackhole is currently available in 100M and Gigabit models, each capable of effectively defending