Approach Overview
Goal: Prevent our site from participating in DDoS attack
Monitor incoming and outgoing traffic looking for signs that some destination is in trouble
Reduce traffic to that destination
Separate attacking from normal flows
Shut down attacking machines