Cloudflare DDoS Protection

Cloudflare automatically detects and mitigates Distributed Denial of Service Open external link (DDoS) attacks using its Autonomous Edge.

The Autonomous Edge includes multiple dynamic mitigation rules exposed as Cloudflare DDoS Protection Managed Rulesets . You can customize the mitigation rules included in these rulesets to optimize and tailor the protection to your needs.

Learn more Managed Rulesets

​​ Availability

• HTTP DDoS attack protection. Included in all Cloudflare plans for zones onboarded to Cloudflare (zones with their traffic routed through the Cloudflare network).

• Network-layer (L3/4) DDoS attack protection. Included in all Cloudflare plans for:

  • Zones onboarded to Cloudflare (zones with their traffic routed through the Cloudflare network)
  • IP applications onboarded to Spectrum
  • IP Prefixes onboarded to Magic Transit

  Only Enterprise customers of Magic Transit and Spectrum can customize the Network-layer DDoS Attack Protection Managed Ruleset.

• Advanced TCP Protection Managed Ruleset. Available in early access to Magic Transit customers.

​​ Related resources

• How to prepare and respond to DDoS attacks Open external link