System and methods of defense against ddos attacks for applications on a multi-substrate multi-ingress shared infrastructure with multiple cloud architectures

Abstract

A computing services environment may provide computing services to a plurality of recipients via the Internet. The computing services environment may include application gateways receiving application-layer request messages from various sources. The computing services environment may also include an orchestration engine determining mitigation policies corresponding with the application gateways based on a classification of a subset of the application-layer request messages as being sent from sources associated with a distributed denial of service attack. The computing services environment may also include application-layer web application firewalls corresponding to the application gateways and transitioning from a deactivated state to an activated state upon receipt of an instruction from the orchestration engine. The activated application-layer web application firewalls may implement the mitigation policies prevent a subset of subsequent application-layer request messages from the subset of the sources from reaching one or more components of the computing services environment.