Patent ID: 11895149
Assignee: CLOUDFLARE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 4:
5. The method of claim 1, further comprising:
receiving second internet traffic from a second client device at the first server of a plurality of servers of a distributed cloud computing network, wherein the second internet traffic is destined for a second destination;
processing, at layer 3, the second internet traffic destined for the second destination including participating in a layer 3 distributed denial of service (DDoS) protection service to protect against a layer 3 DDoS attack against the second destination;
determining that the received second internet traffic is not to be dropped by the layer 3 DDoS protection service;
determining that the first server is not permitted to process the received second internet traffic at layers 5-7;
determining that at least a first set of one or more third servers and a second set of one or more fourth servers are permitted to process the received second internet traffic at layers 5-7, wherein the first set of one or more third servers are reachable at a first IP address and the second set of one or more fourth servers are reachable at a second IP address;
responsive to the determining that the first server is not permitted to process the received second internet traffic at layers 5-7 and to the determining that the at least the first set of third servers and the second set of fourth servers are permitted to process the received second internet traffic at layers 5-7, selecting, from the at least the first set of third servers and the second set of fourth servers, the first set of third servers; and
transmitting the second internet traffic from the first server to the first IP address.