Tencent Cloud Wins IPv6 Best Practice Award for Network Security Solutions

On July 30, 2020, the 2020 Global IPv6 Next Generation Internet Summit was held in Guangzhou. At the conference, the organizing committee for the first time awarded the IPv6 Best Practice Award. Tencent Cloud's T-Sec Network Intrusion Prevention System and Tencent Cloud SCDN Security Acceleration Product won this honor for their innovative practices in IPv6 scenario-based security solutions.

During his speech, Gan Xiang, Director of Tencent Security Platform Department and Senior Security Expert, pointed out that the IPv6 era has arrived. As the foundation for industrial digitalization, network security is an important aspect that cannot be ignored in IPv6 development. Tencent will continue to deepen scenario-based security solutions in IPv6 environments, hoping to work hand in hand with all sectors to contribute Tencent's intelligent algorithms and security computing power to help upgrade industrial digitalization.

As a key supporting technology for 'Digital New Infrastructure,' IPv6 is entering its golden age of development. The Action Plan for Promoting the Large-Scale Deployment of Internet Protocol Version 6 (IPv6) issued by the General Office of the CPC Central Committee and the General Office of the State Council clearly states the goal of building the world's largest commercial IPv6 network to meet the urgent needs of China's technological and industrial innovation development and enhancement of network security capabilities.

Data from the National IPv6 Development Monitoring Platform shows that as of June 2020, China's active IPv6 users reached 317.8 million, and the total number of IPv6 address resources applied for nationwide reached 47,859 blocks (/32), ranking second in the world, which can meet the current requirements for commercial-scale deployment of IPv6.

With the basic completion of IPv6 upgrade and transformation, the IP resource pool that attackers can exploit has expanded infinitely. Simple security strategies based on IP addresses can no longer meet protection needs. Enterprises need computing power far beyond general business to support the sudden increase in the level and complexity of security strategies.

Targeting emerging security trends such as IPv6, the Tencent Tianmu team adopted the approach of 'deep into the kernel, close to hardware' to comprehensively upgrade the security computing power of Tencent Cloud's T-Sec Network Intrusion Prevention System. With multiple industry-leading national patent technologies, functions that originally relied on the kernel are directly designed in the kernel state, avoiding repeated switching between the application layer and kernel state. Leveraging the excellent performance of Tencent's self-developed cloud server Xinghai, further improvements in system logic computing power and network throughput have been achieved, realizing real-time control of bidirectional network traffic in milliseconds, with a threat blocking success rate of up to 99.99%, effectively supporting cloud security.

The application of AI technology on the network intelligent PaaS platform is also one of the key research directions of the Tencent Tianmu team. Using AI algorithms can make up for the detection of new unknown security threats by static security strategies, achieve intelligent characterization of risk traffic portraits, improve the platform's risk control capabilities, and continuously provide Tencent Cloud security strength to industry customers.

With excellent practices in IPv6 network threat control solutions and security computing power algorithms, the 'T-Sec Network Intrusion Prevention System' has won unanimous recognition from the judging panel and was awarded the 'IPv6 Best Practice Award' by the Global IPv6 Forum, which is another recognition of Tencent's IPv6 technology practices by authoritative institutions. In the selection of the 'China Institute of Communications Science and Technology Award' in 2019, the joint project of Tencent, China Mobile, China Academy of Information and Communications Technology, and Huawei, 'IPv6 Technology Research and Large-Scale Application in Mobile Internet,' won the first prize, and innovations such as distributed SDN cloud network technology for ultra-large cloud platforms based on dual-stack IPv4/IPv6 have been highly praised.

Director Liu Dong of the National Engineering Research Center for Next Generation Internet gave a high evaluation of Tencent's IPv6 technology practices: 'The T-Sec Network Intrusion Prevention System, based on its advantages in intelligent algorithms and security computing power, relying on the ability accumulation of real-time computing of full traffic services for Tencent Cloud and Tencent's self-operated business, has achieved precise network threat control capabilities based on traffic characteristics in the IPv6 environment, effectively helping enterprises cope with the new security challenges of the IPv6+ era.'

Currently, the T-Sec Network Intrusion Prevention System has provided daily and heavy protection services for partners in key information infrastructure fields such as government and enterprise, finance, and major transportation, actively contributing to national IPv6 transformation and network space security.

The 2020 Global IPv6 Next Generation Internet Summit is hosted by the Global IPv6 Forum and co-organized by the National Engineering Research Center for Next Generation Internet and Macau University of Science and Technology. The Global IPv6 Forum is the largest and most extensive non-profit international organization in the IPv6 industry, which has been committed to promoting the development of global IPv6 and providing operational guidance standards to promote the actual deployment of IPv6. During the summit, authoritative experts from academia and industry around the world discussed the opportunities and challenges of global next-generation internet innovation development and new infrastructure construction from different dimensions such as politics, industry, academia, research, and application.