(Internet Transit Provider) +------------+ +----------------+ | Network | DOTS | Administrative | BGP Flowspec Alert----->| Management |C<--->S| System | (Rate-Limit) | System | | |---> +------------+ +----------------+ BGP Flowspec +------------+ +------------+ (Rate-Limit X bps) | Forwarding | | Forwarding |<--- | node | | node | Link1 | | | | DDoS & Normal traffic [Target]<------------------------------------================ Pipe +------------+ +------------+ Attack Traffic Capability Bandwidth X bps Y bps Network-access success rate X / (X + Y) C: DOTS client functionality S: DOTS server functionality