A system for providing differentiated services to traffic flows of a content distribution network is disclosed. In particular, the system may include determining if a first portion of an internet protocol address associated with a traffic flow includes an identifier for a node in the content distribution network by comparing the identifier to a set of prefixes for the content distribution network. Additionally, the system may include determining if a second portion of the internet protocol address matches a unique host address specified by the content distribution network for a customer of the content distribution network. If a rule for providing a differentiated service exists for the customer, the first portion is in the set of prefixes, and the second portion matches the unique host address specified for the customer, the system may provide the differentiated service for the traffic flow.