ESpanix deploys Nokia Deepfield Defender to protect Spain's internet traffic from DDoS attacks

ESpanix is using Nokia Deepfield Defender to offer in-country, AI-based DDoS protection to over 200 networks serving most Spanish internet users.

Rhea-AI Summary

Nokia (NOK) announced that Spain's largest internet exchange point, ESpanix, has deployed Nokia Deepfield Defender to protect its Barcelona- and Madrid-based exchange platform and connected networks from DDoS attacks.

The deployment lets ESpanix offer an optional DDoS protection service to more than 200 national and international networks that together serve the majority of Spanish internet end users. Deepfield Defender uses AI-driven, big data analytics and Nokia's Deepfield Secure Genome feed to detect all types of DDoS attacks in seconds and automatically remove only unwanted traffic. Mitigation occurs within ESpanix infrastructure and inside Spain, keeping traffic local and supporting data sovereignty while avoiding external scrubbing centers. The project extends an existing partnership that in 2025 enabled 400G connectivity at ESpanix using Nokia technology.

Market Context

NOK's 4.8% pre-publication gain coincided with higher prices for four of five supplied peers, while ...

Analysis

NOK's 4.8% pre-publication gain coincided with higher prices for four of five supplied peers, while the ESpanix deployment added a customer-facing security service to Nokia's existing interconnection relationship.

Key Figures

Networks covered: More than 200 networks In-network locations: Six datacentres Connectivity: 400G

Networks covered

More than 200 networks

Networks connected to ESpanix

In-network locations

Six datacentres

Madrid and Barcelona deployment footprint

Connectivity

400G

ESpanix connectivity introduced through the 2025 Nokia partnership

Key Terms

ddos, application-layer attacks, network telemetry

3 terms

ddos technical

"protect its exchange platform and connected networks against distributed denial-of-service (DDoS) attacks"

A DDoS (distributed denial-of-service) attack is when many compromised computers or devices artificially flood a company's online systems with traffic so legitimate users cannot access websites, apps, or services. For investors, DDoS episodes can disrupt sales, damage customer trust, and expose weaknesses in a company's security — like a traffic jam that shuts down a city's main highway, revealing costs and operational risks that can affect revenue and stock value.

application-layer attacks technical

"hyper-volumetric and application-layer attacks against networks"

Application-layer attacks are cyberattacks that target the top layer of software that users interact with—websites, apps, APIs or services—by exploiting flaws in how those programs process data or handle requests. They matter to investors because such attacks can disrupt service, damage customer trust, trigger regulatory scrutiny, and cause direct financial loss; think of them as someone jamming a shop’s front door or stuffing fake orders into the checkout system to break business operations.

network telemetry technical

"big data analytics of network telemetry with Deepfield Secure Genome"

Network telemetry is the automated collection and reporting of data about how a computer network is operating—things like traffic volumes, device status, latency, packet loss, errors and security events—sent in real time to monitoring systems. It matters to investors because this “vital signs” data reveals a company’s service reliability, capacity, security posture and operational risk, which can affect revenue continuity, customer trust and costs.

AI-generated analysis. How Rhea-AI works. Not financial advice.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

Press Release
ESpanix deploys Nokia Deepfield Defender to protect Spain's internet traffic from DDoS attacks 

• Spain's largest internet exchange point deploys Nokia's AI-driven DDoS security to detect and mitigate attacks that cross its Barcelona- and Madrid-based exchange platform within seconds.
• A new optional DDoS protection service is available to more than 200 national and international networks connected to ESpanix, which together serve the majority of internet end users in Spain.
• In-network protection keeps Spanish internet traffic — and its security — inside Spain, supporting data sovereignty and European regulatory expectations.

14 September, 2026

Espoo, Finland – Nokia today announced that ESpanix, Spain's largest internet exchange point (IXP), has selected and deployed Nokia Deepfield Defender to protect its exchange platform and connected networks against distributed denial-of-service (DDoS) attacks. The deployment enables ESpanix to offer DDoS protection as a new, optional value-added service to the more than 200 national and international networks that exchange traffic at the ESpanix Node and together serve the vast majority of internet end users in Spain.

DDoS attacks continue to grow in size, frequency, and sophistication, with massive botnets of compromised IoT devices and weaponized residential proxies driving hyper-volumetric and application-layer attacks against networks, services, and end users. As the central crossroads of the Spanish internet, the ESpanix Node occupies a strategic position: stopping attack traffic at the exchange prevents it from ever reaching the networks — and the businesses, public services, and consumers — behind its ports.

“DDoS attacks remain a primary threat to our connected networks daily. Integrating a proactive detection and mitigation solution into our infrastructure represents a significant step forward in ESpanix's ongoing commitment to maximizing security across our service portfolio. Leveraging the exceptional detection granularity of Nokia Deepfield, we can substantially reduce the impact of DDoS events by isolating and removing only unwanted traffic. Crucially, this protection is delivered entirely within our network and within Spain, across the six datacentres in Madrid and Barcelona where we connect with our members. This ensures that local traffic remains local, eliminating any need for detours through third-party scrubbing infrastructure and thereby guaranteeing strict data sovereignty. By unifying these capabilities, we have made DDoS protection far simpler to implement and operate, ensuring that our end users need no specific technical expertise to enjoy robust, seamless defense. This new service enhances the value of connecting to the ESpanix Node and introduces a new dimension to the services we offer our members,” said Javier Achirica, CTO, ESpanix.

“Internet exchanges are critical infrastructure — and for Spain, ESpanix is where the national internet comes together, which also makes it the smartest place to stop DDoS attacks. With Deepfield Defender, ESpanix detects and removes attack traffic in seconds, directly in the network and inside the country. This deployment shows how internet exchanges across Europe can turn security into stronger resilience for their members and a new source of value at the same time,” said Jeff Smith, Vice President and General Manager, Nokia Deepfield.

Nokia Deepfield Defender combines AI-driven, big data analytics of network telemetry with Deepfield Secure Genome®, Nokia's proprietary, cloud-based data feed that tracks the security context of the internet. Defender detects all types of DDoS attacks in seconds and drives automated, network-based mitigation with a very high degree of granularity — surgically removing only unwanted traffic while legitimate packets keep flowing. By unifying detection and mitigation in the network itself, ESpanix avoids rerouting member traffic to external scrubbing centers: attacks are identified and removed where the traffic flows, keeping Spanish internet traffic and the responsibility for securing it within Spain.

The deployment extends a partnership that, in 2025, made ESpanix the first IXP in Spain to offer 400G connectivity to its customers, built on Nokia interconnect and service routers running over Nokia optical transport. With Deepfield Defender, ESpanix joins a growing group of leading European internet exchanges that use Nokia Deepfield to protect their members and to build new security services on top of their interconnection platforms. For exchanges, the deployment model has a multiplier effect: a single deployment at an exchange extends protection to every network that connects through it.

The new DDoS protection service is being introduced to the ESpanix community and the wider industry at upcoming events.

Multimedia, technical information and related news

• Product page: Nokia Deepfield
• Product page: Nokia Deepfield Defender
• Web page: ESpanix
  
  

About Nokia
Nokia is the world's leading provider of network technology and enables a new era of artificial intelligence. We are developing the networks of the future that connect people, devices and intelligence. Our network solutions span fixed and mobile networks, as well as IP, optical, core, and data center networks. Our secure, AI-native network infrastructure enables the application and utilization of AI on a global scale.

About ESpanix

ESpanix is one of the largest Digital Hubs in Southern Europe and the oldest one in Spain. The company operates across three business areas: interconnection, data centers and value-added services. ESpanix services are available in the Calle Mesena building in Madrid as well as in five POPs within the metropolitan areas of Barcelona and Madrid. ESpanix Datacentre is a Tier IV compliant building and allows for direct connection with all the major national and international fiber and capacity providers. The majority of Spanish ISPs are connected to ESpanix Node. “Si pasa en Internet, pasa por ESpanix”

Media inquiries
Nokia Press Office
Email: Press.Services@nokia.com

ESpanix Press Office
Email: press@espanix.net

Follow us on social media
LinkedIn X Instagram Facebook YouTube

FAQ

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

Who can use the new DDoS protection service offered by ESpanix?

The new DDoS protection service is available as an optional, value-added service to the more than 200 national and international networks that exchange traffic at the ESpanix Node and that together serve the vast majority of internet end users in Spain.

How does Nokia Deepfield Defender handle DDoS mitigation for ESpanix?

Nokia Deepfield Defender combines AI-driven, big data analytics of network telemetry with the Deepfield Secure Genome cloud-based security feed to detect all types of DDoS attacks in seconds and trigger automated, network-based mitigation. Attack traffic is removed directly within ESpanix's network and within Spain, so local traffic stays local and does not need to be rerouted through external scrubbing centers.