Cloudflare Docs
DDoS Protection
Visit DDoS Protection on GitHub
Set theme to dark (⇧+D)

Cloudflare DDoS Protection

Cloudflare automatically detects and mitigates Distributed Denial of Service (DDoS) attacks using its Autonomous Edge.

The Autonomous Edge includes multiple dynamic mitigation rules exposed as Cloudflare DDoS Attack Protection managed rulesets. You can customize the mitigation rules included in these rulesets to optimize and tailor the protection to your needs.

Learn more Managed rulesets


​​ Availability

  • HTTP DDoS attack protection. Included in all Cloudflare plans for zones onboarded to Cloudflare (zones with their traffic routed through the Cloudflare network).

  • Network-layer (L3/4) DDoS attack protection. Included in all Cloudflare plans for:

    Only Enterprise customers of Magic Transit and Spectrum can customize the Network-layer DDoS Attack Protection managed ruleset.

  • Advanced TCP Protection. Available to all Magic Transit customers.