DDoS Detection, Mitigation, Orchestration, and Threat Intelligence
Consolidated Security & CGNAT
TLS/SSL Inspection
Web Application Firewall
Application Security & Load Balancing
Analytics & Management
CGNAT & IPv6 Migration
Contain your excitement …..5G is coming (again)!
Wait….wasn’t 5G launched over two years ago?
Well, yes. For those not familiar with the nuances of 5G technology, 5GC (core or standalone) takes 5G deployment to the next level and replaces the 4G packet core with a new, cloud-native core using containers and following 3GPP specifications (release 15). This is somewhat separate from the market-by-market launch that most operators publicize, and the activity is less visible to the casual subscriber.
We recently sponsored a 5G security survey with Heavy Reading to understand the extent of mobile operator 5G core deployment. It was a global survey of 115 service providers that included mobile operators as well as fixed broadband providers. We asked several questions about the timing and extent of 5G core deployment and adoption and where the functions A10 Networks provides will fit in.
So, given that research, what do I see for 2021?
Most mobile operators that have launched 5G have chosen what’s called a “non-standalone” implementation. That is a hybrid of 4G and 5G that allows mobile operators to offer much of the 5G capabilities to their subscribers while still leveraging existing investment in their 4G packet core. Operators are eager to take advantage of the benefits of 5GC (standalone) – greater service agility and lower costs. The survey revealed that operators are committed to 5GC (SA or standalone) implementation, with 93 percent of mobile operators implementing within a three-year window and investing in multiple 5G security options.
Mobile operators also see rapid adoption of 5G over the next three years by subscribers as 5G deployment accelerates. Most operators said that within five years, at least 25 percent of their traffic would be carried via 5G – with 40 percent of operators predicting that most of their traffic would be carried by 5G. This is consistent with the recent Ericsson Mobility Report that forecasts 56 percent of total mobile data traffic will be 5G by 2026.
That’s a significant leap from today where almost half of operators report they have no traffic on 5G core at all. For 2021, 9 percent of operators say that most of their traffic will be on 5Gwith 70 percent predicting less than 50 percent will be 5G.
It’s really hard for mobile operators to get rid of old technology. 3G still exists in most mobile networks despite rapid 5G deployment. This is a combination of subscribers that won’t give up their older handsets, specific geographic areas, such as rural areas, that have legacy equipment and regulatory and industry practices that require a lengthy process for “sunsetting” older technologies. In North America, AT&T shutdown of 3G is expected in 2022; Verizon in 2021.
For example, today, only 13 percent of mobile operators surveyed have managed to eliminate support of 3G. By 2025, most operators (60 percent) said that they will no longer support 3G. That means that by 2025, 40 percent of operators will still carry 3G traffic. This also increases concerns around 5G security, since older technologies have multiple security vulnerabilities that will still be present in these multi-generational networks.
By the end of 2021, all major mobile operators will have shut down their 2G networks. In Europe, however, the shutdown has been complicated by the use of 2G in smart meters and eCall modems in cars that initiate a call to send information, such as the location of the accident, to emergency services.
According to a BPI report commissioned by A10 Networks, nearly all mobile operators state that mobile edge compute (MEC) is a vital part of their 5G deployment plans and most are actively deploying or will deploy within the next year or so. IDC forecasts 50 percent of all new infrastructure deployments (enterprise as well as service provider) will be at the edge by 2023. I believe that mobile service providers will also jump on the advantages of mobile edge compute, but take a more measured, strategic approach to their use of MEC, at least in the near term. By 2025, we see most mobile operators will have deployed 5G (standalone) combined with MEC and will direct up to 25 percent of their traffic through these nodes. Operators will also use strategic partners for their enterprise customers that want the lower latency that a mobile edge compute service provides.
It’s already going in that direction now. DDoS attacks are getting more frequent, intense and most are smaller in size, making them harder to detect. The average attack size is only 12 Gbps, with most attacks being under 5 Gbps. A10’s The State of DDoS Weapons Report, Q2 2020 shows 10M available DDoS weapons
The Heavy Reading 5G Security Report shows that small DDoS attacks are the primary reason for investment priority for MEC. And with MEC capacity as low as 600 Mbps, mobile service providers and their new 5G enterprise customers are at substantial risk for these common DDoS attacks.
Those are the predictions for 2021. Overall, in spite of the pandemic, we believe that demand for 5G services will be strong and that subscribers will continue to find more value and use cases from the growing 5G capability.
