Secure Solution for Data Centre Connect

Secure Solution for Data Centre Connect

Today’s enterprises recognize that their data centres are continuously at risk from internal and external security threats. More than simply deploying antivirus and firewall defenses, enterprises must establish comprehensive IT security programs that protect a virtual and distributed environment of computing and storage resources. For these distributed resources to work effectively and meet diverse end-user requirements, applications require secure, low-latency real-time communications with guaranteed QoS. The data centre connect (DCC) infrastructure and optical fibers used for DCC transport are key components of a holistic and systematic IT security program.

Encryption is the algorithmic process that transforms data into unreadable cryptotext. Real-time, on-the-fly transformation is the only option for cost-effectively meeting end-user needs in an always-on world. L1 encryption is the preferred method for DCC, supporting higher-layer data flow across metro or long-haul Dense Wavelength Division Multiplexing (DWDM) transport. Over secure optical DWDM links, L1 encryption maximizes capacity and performance for DCC.

The Alcatel-Lucent Secure Data Centre Connect Solution, an integral part of the industryleading Alcatel-Lucent 1830 Photonic Service Switch (PSS) optical DWDM platform, addresses both enterprise and service-provider requirements, with L1 hardware encryption at 10G. The platform enables the encoding and decoding of Advanced Encryption Standard (AES) encryption while introducing latency of less than 10 μs.

Management of an organization’s confidential data can be complex in today’s compliance-driven environment. The Alcatel-Lucent Data Centre Connect Solution provides the Alcatel-Lucent Key Management Tool, a secure, scalable application for encryption key life-cycle management.

The Alcatel-Lucent 1830 PSS can manage specific physical and logical security risks regarding individual network elements — including the ability to enable a secure hardened device configuration, comprehensive logs with intrusion prevention alarms, highly flexible optical interface redundancy options, and an optical intrusion detection feature that constantly monitors links for unexpected loss of signal strength from unauthorized optical fiber taping.

Alcatel-Lucent 1830 PSS for secure DCC

• Ethernet, Fibre Channel (FC) and InfiniBand® aggregation
• Integrated AES L1 encryption hardware at 10G
• T-ROADM wavelength switching
• Less than 10 μs latency
• Encryption key life-cycle management
• Optical intrusion protection
• Protection switching
• Secure configuration modes and comprehensive logging