Skip to content

Cloudflare DDoS protection automatically detects and mitigates Distributed Denial of Service (DDoS) attacks using its Autonomous Edge. With Magic Transit, you have access to additional Advanced DDoS mitigation systems, such as:

For more information, refer to Cloudflare DDoS Protection.


Execution order

Magic Transit executes mitigation systems in the following order:

  1. DDoS managed rulesets
  2. Advanced TCP Protection
  3. Advanced DNS Protection
  4. Cloudflare Network Firewall

Programmable Flow Protection runs within the Advanced DDoS Protection layer for UDP-based protocols.