1. A computer-implemented method, comprising: receiving, at a global server system, from each of a plurality of local network devices, network data specifying network communication activity at the local network device, wherein the plurality of local network devices collectively provide backbone communications facilities for multiple networks; aggregating, at the global server system, the network data from each of the local network devices; analyzing, at the global server system, the aggregated network data to identify network activities; generating, at the global server system, update data based on the analysis of the aggregated network data, the update data including instructions for the local network devices for processing network communications to or from the local network devices, wherein the instructions specify a prioritization schema for network communications based at least in part on reputations associated with network devices originating the network communications or associated with network devices to which the network communications are destined, the instructions operable to cause one or more local network devices to drop or delay particular network communications based at least in part on the prioritization schema; and transmitting from the global server system the update data to the local network devices, the transmitting of the update data being one of a response to queries received from the local network devices or a push from the global server system to the local network devices.