Systems and methods for traffic shaping

A computer-implemented method comprising:

• configuring one or more rules at a traffic resolver instance, the one or more rules to dictate when traffic received at the traffic resolver instance is to be redirected to a shaper instance, the shaper instance capable of performing one or more of a plurality of actions, wherein the plurality of actions include altering a shape of the traffic prior to sending the traffic to an original destination of the traffic, redirecting the traffic to a honeypot, allowing the traffic without doing altering action, or blocking the traffic;
• receiving traffic at the traffic resolver instance from a source of traffic;
• determining, at the traffic resolver instance from packet metadata and telemetry data of the traffic, the traffic should be redirected to the shaper instance;
• resolving, by the traffic resolver instance, addressing of the traffic such that a new destination for the traffic is the shaper instance;
• sending, by the traffic resolver instance, the traffic to the shaper instance;
• and
• performing, by the shaper instance, one or more of the plurality of actions on the traffic.

A system comprising:

• a first one or more computing devices to implement a traffic resolver instance in the multi-tenant provider network, the traffic resolver instance including instructions that upon execution cause the traffic resolver instance to:
• receive traffic from a source of traffic, wherein the ingress point traffic resolver instance is to be configured with one or more rules that dictate when traffic received at the traffic resolver instance is to be redirected to a shaper instance, the shaper instance capable of performing one or more of a plurality of actions, wherein the plurality of actions include to alter a shape of the traffic prior to sending the traffic to an original destination of the traffic, to redirect the traffic to a honeypot, to allow the traffic without doing altering action, and to block the traffic, and
• determine, from packet metadata and telemetry data of the traffic, the traffic should be redirected to the shaper instance;
• resolve addressing of the traffic such that a new destination for the traffic is the shaper instance;
• send the traffic to the shaper instance;
• and
• a second one or more computing devices to implement the shaper instance in the multi-tenant provider network, the shaper instance including instructions that upon execution cause the shaper instance to at least perform one more of one or more of the plurality of actions on the traffic.