DDoS protection

Cloudflare DDoS protection automatically detects and mitigates Distributed Denial of Service (DDoS) attacks using its Autonomous Edge. Magic Transit customers have access to additional features, such as:

• Advanced TCP protection (disabled by default)
• Advanced DNS protection (beta)

Refer to Cloudflare DDoS documentation for more information.

---

Execution order

The execution order of the different mitigation systems for Magic Transit customers is the following:

1. DDoS managed rulesets
2. Advanced TCP Protection
3. Advanced DNS Protection
4. Magic Firewall

Was this helpful?

What did you like?

Accurate

Easy to understand

Solved my problem

Helped me decide to use the product

Other

What went wrong?

Hard to understand

Incorrect information

Missing the information

Other

Thank you for helping improve Cloudflare's documentation!