Mitigation of distributed denial-of-service attacks

A system, comprising:

• one or more processors;
• and
• memory that stores instructions that, if executed by the one or more processors, cause the system to:
• cause a limit to be placed on data provided to a server over an observation interval;
• determine whether one or more conditions for removing the limit are met while the limit is placed, wherein the one or more conditions for removing the limit are met based at least in part on a number of data packets, over an observation interval, with a particular source address being below a threshold;
• and
• as a result of the one or more conditions for removing the limit being met, cause the limit to be removed.

A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of execution by one or more processors of a computer system, cause the computer system to at least:

• determine a first number of packets over a first observation interval having a source network address;
• as a result of the first number of packets exceeding a first threshold, restrictng access to a server by packets having the source network address;
• and
• as a result of a second number of packets over a second observation interval during which the restriction is active failing to exceed a second threshold, remove the restriction.