Methods and apparatus for distributed backbone internet DDOS mitigation via transit providers

A method, comprising:

• determining a target address of a server to which a pattern of network messages matching a traffic profile is directed in accordance with a first set of routing information, wherein the first set of routing information includes a route to the target address over a private backbone network link of a provider network;
• generating, in response to said determining, new routing information associated with the target address, wherein the new routing information includes a second route to the target address over a path that excludes the private backbone network link;
• providing the new routing information to one or more routers of an Internet Protocol transit provider;
• receiving the new routing information propagated by the Internet Protocol transit provider at a remote point of presence of the provider network, wherein the remote point of presence, the server, and the private backbone network link are part of the same provider network;
• and
• from the remote point of presence, directing additional network traffic to the target address over the second route.

A non-transitory computer-accessible storage medium storing program instructions computer-executable to implement:

• receiving, at a remote point of presence of a provider network that comprises the remote point of presence, a data center and one or more private backbone links from the point of presence to the data center, a first set of routing information, wherein the first set of routing information includes a first route from the point of presence to a network address at the data center, wherein the first route includes a private backbone link of the one or more private backbone links;
• transmitting a first set of network messages from the remote point of presence to the network address over the first route;
• receiving, at the remote point of presence, an indication of a transmission of a pattern of network messages matching a traffic profile, wherein the transmission is targeted at the network address;
• and
• in response to receiving the indication, transmitting additional network traffic from the remote point of presence to the network address over a second route, wherein the second route excludes the private backbone link.