1. A method for isolating legitimate network traffic during a denial of service attack comprising: receiving a plurality of packets from a network; detecting a denial of service attack from the network on a first virtual network stack; in response to detecting the attack from the network: forwarding a plurality of packets associated with a subsequent connection to a temporary data structure associated with a second virtual network stack, wherein the temporary data structure associated with the second virtual network stack is a lowest priority queue configured at a setup time of the subsequent connection; determining whether the subsequent connection is legitimate; and forwarding at least one of the plurality of packets associated with the subsequent connection to a temporary data structure associated with the first virtual network stack if the subsequent connection is legitimate, wherein a higher priority mapping is assigned to the subsequent connection by a classifier, and wherein the first virtual network stack and the second virtual network stack are executing in a single host.