Cloudflare DDoS Protection
Cloudflare automatically detects and mitigates Distributed Denial of Service (DDoS) attacks using its Autonomous Edge.
The Autonomous Edge includes multiple dynamic mitigation rules exposed as Cloudflare DDoS Attack Protection managed rulesets. You can customize the mitigation rules included in these rulesets to optimize and tailor the protection to your needs.
Availability
HTTP DDoS attack protection. Included in all Cloudflare plans for zones onboarded to Cloudflare (zones with their traffic routed through the Cloudflare network).
Network-layer (L3/4) DDoS attack protection. Included in all Cloudflare plans for:
- Zones onboarded to Cloudflare (zones with their traffic routed through the Cloudflare network)
- IP applications onboarded to Spectrum
- IP Prefixes onboarded to Magic Transit
Only Enterprise customers of Magic Transit and Spectrum can customize the Network-layer DDoS Attack Protection managed ruleset.
Advanced TCP Protection. Available to all Magic Transit customers.