DDoS protection

Cloudflare DDoS protection automatically detects and mitigates Distributed Denial of Service (DDoS) attacks using its Autonomous Edge. Magic Transit customers have access to additional features, such as:

• Advanced TCP protection (disabled by default)
• Advanced DNS protection (beta)

Refer to Cloudflare DDoS documentation for more information.

---

Execution order

The execution order of the different mitigation systems for Magic Transit customers is the following:

1. DDoS managed rulesets
2. Advanced TCP Protection
3. Advanced DNS Protection
4. Magic Firewall