A. The BGP flowspec service runs on service provider edge routers to quickly detect DDoS attacks.

B. BGP flowspec filters are implemented in the forwarding plane of an MX Series router to enable high- speed filtering of attacks.

C. BGP flowspec uses Junos Space Security Director to distribute filters to service provider edge routers.

D. BGP flowspec allows for more granular filtering that null-routing DDoS victims at the service provider edge.

E. BGP flowspec uses MP-BGP to automatically distribute filters to service provider edge routers.