The Border Gateway Protocol's flow specification feature provides granular protection against distributed denial-of-service attacks.