Processing network traffic to defend against attacks

A system for processing network traffic, comprising:

• one or more processors configured to:
• determine that one or more packets of network traffic associated with a first public network address have been dropped, the first public network address being associated with a target host;
• assign a second public network address to the network traffic and generate a forwarding path corresponding to the second public network address, wherein the second public network address is configured to receive the network traffic, and wherein the forwarding path is configured to forward the network traffic received at the second public network address to the target host;
• and
• notify a filtering device to transmit the network traffic to the second public network address and cause the network traffic to be forwarded to the target host according to the forwarding path;
• and
• one or more memories coupled to the one or more processors and configured to provide the one or more processors with instructions.

A computer program product for processing network traffic to counter DDoS attacks at a target host, the computer program product being embodied in a tangible computer readable storage medium and comprising computer instructions for:

• determining that one or more packets of network traffic associated with a first public network address have been dropped, the first public network address being associated with the target host;
• assigning a second public network address to the network traffic and generating a forwarding path corresponding to the second public network address, wherein the second public network address is configured to receive the network traffic, and wherein the forwarding path is configured to forward the network traffic received at the second public network address to the target host;
• and
• notifying a filtering device to transmit the network traffic to the second public network address and cause the network traffic to be forwarded to the target host according to the forwarding path.

A network traffic processing method, comprising:

• filtering network traffic associated with a first public network address and forwarding the filtered network traffic to the first public network address;
• receiving a second public network address from an SDN, the second public network address being associated with the network traffic that was initially associated with the first public network address;
• and
• forwarding the network traffic to the second public network address.

A system for processing network traffic, comprising:

• one or more processors configured to:
• filter network traffic associated with a first public network address and forward the filtered network traffic to the first public network address;
• receive a second public network address from an SDN, the second public network address being associated with the network traffic that was initially associated with the first public network address;
• and
• forward the network traffic to the second public network address;
• and
• one or more memories coupled to the one or more processors and configured to provide the one or more processors with instructions.