methods and systems for an integrated solution to flow collection for determination of rate - based dos attacks targeting isp infrastructure are provided . according to one embodiment , a method of mitigating ddos attacks is provided . information regarding at least one destination within a network for which a distributed denial of service attack status is to be monitored is received by a ddos attack detection module coupled with a flow controller via a bus . the ddos attack status is determined for the at least one destination based on the information regarding the at least one destination . when a ddos attack is detected the flow controller is notified of the ddos attack status for the at least one destination by the ddos attack detection module . responsive thereto , the flow controller directs a route reflector to divert traffic destined for the at least one destination to a ddos attack mitigation appliance within the network .