How does a router use BGP to deflect a distributed denial-of-service attack against a prefix at all edge routers in the same AS?