Nokia strengthens Worldstream’s hosting security with advanced DDoS Protection in the Netherlands

Worldstream is a Dutch cloud infrastructure provider operating three company-owned data centers in the Netherlands and a 10 Tbps global backbone. Founded in 2006, it delivers Infrastructure-as-a-Service — bare-metal servers, private cloud, hosting, and storage — to customers across IT services, software development, cybersecurity, telecommunications, and financial services, with roughly 51 percent of its customer base in Europe and 15 percent in the Americas.

Many of Worldstream's customers operate in highly regulated segments where data breaches,     cyberattacks, and downtime carry severe consequences. That demand profile sits against a sharply deteriorating DDoS threat landscape: Nokia's own data shows DDoS traffic grew 166 percent between June 2023 and June 2024, botnets now account for around 60 percent of DDoS traffic, and 44 percent of attacks observed in 2024 lasted under five minutes — too short for a manual operator response. Many networks now experience well over 100 significant DDoS events (attacks) per day.

Worldstream's in-house-built DDoS Shield, with 1 Tbps of scrubbing capacity, was struggling to keep pace. Large carpet-bombing attacks — which target many IP addresses at once — were exceeding scrubber capacity and forcing costly traffic diversion, introducing latency for customers. Worldstream needed a next-generation solution that could apply AI and machine learning for faster, more accurate detection, automate mitigation for every DDoS class (volumetric, botnet, carpet-bombing, and application-layer), and produce the detailed incident reporting required by frameworks such as the new EU network-security regulations.

After seeing Nokia demonstrate network edge-based DDoS mitigation at the SReXperts technical event and following independent validation of the solution in the lab of a leading European security testing partner, Worldstream selected the Nokia DDoS security solution. The decision was anchored by one architectural shift: moving mitigation off a centralized scrubber and onto the IP routers already in the Worldstream network — eliminating the latency, cost, and capacity ceilings that come with diverting traffic to a separate scrubbing layer.

Worldstream deployed Nokia Deepfield Defender, an AI-driven big-data analytics application that combines real-time network telemetry, DNS, and BGP data with the patented Deepfield Secure Genome® — a continuously updated cloud feed that tracks the security context of more than five billion IPv4 and IPv6 addresses, classifies over 30 categories of internet traffic, and applies more than 100 machine-learning rules to identify compromised hosts and emerging attack sources. Defender drives mitigation directly on Worldstream's Nokia 7750 Service Routers, powered by the FP5 network processor, which deliver line-rate filtering across every peering interface. The complete mitigation cycle runs in under 30 seconds — and often far faster — even for the most complex and novel attacks. The deployment is backed by the Deepfield Emergency Response Team Support (ERTS) service, giving Worldstream 24/7 access to Nokia security experts.

The Nokia solution delivers:

• Eightfold increase in DDoS mitigation capacity, lifting Worldstream's protection envelope from a 1 Tbps scrubber-bound limit to multi-terabit, network-embedded mitigation that scales with the network itself
• Full automation: complete mitigation in under 30 seconds for even the most complex and novel attacks, removing manual operator intervention and the human errors it invites
• Network-edge mitigation that stops attacks at peering interfaces with zero traffic redirection and zero scrubber-induced latency
• Resilience against large-scale carpet-bombing attacks that target many hosts simultaneously and previously overwhelmed Worldstream's scrubber capacity
• Coverage for every DDoS class — volumetric, botnet, carpet-bombing, application-layer (including TCP-based application floods), and residential-proxy-based attacks
• AI- and machine-learning-driven detection that lowers false positives and adapts continuously to new threats using Deepfield Secure Genome's view of more than five billion IPv4 and IPv6 addresses
• Detailed incident reporting aligned to customer and regulatory demands, including the critical-incident notification obligations of the EU's NIS2 directive
• API-based integration with Nokia's managed-security-service portal, letting Worldstream customize policies and DDoS service definitions for its own customer base
• 24/7 Deepfield Emergency Response Team Support, giving Worldstream's NOC and security operations team direct backup from Nokia security experts

With Nokia Deepfield Defender and the 7750 SR, Worldstream's DDoS Shield service now protects business-critical workloads against the latest generation of AI-era attacks without the latency, capacity ceilings, or operational cost of scrubber-based architectures — and gives Worldstream the headroom to keep pace as DDoS traffic and attack complexity continue to climb. The shift turns DDoS protection from a defensive overhead into a service Worldstream can scale, customize, and offer with confidence to customers in the most regulated corners of European industry.