Cloudflare DDoS Protection
Cloudflare automatically detects and mitigates distributed denial-of-service (DDoS) attacks via our autonomous DDoS systems.
These systems include multiple dynamic mitigation rules exposed as DDoS attack protection managed rulesets. You can customize the mitigation rules included in these rulesets to optimize and tailor the protection to your needs.
Features
Managed rulesets
Protect against a variety of DDoS attacks across layers 3/4 (network layer) and layer 7 (application layer) of the OSI model.
Adaptive DDoS protection
Get increased protection against sophisticated DDoS attacks on layer 7 and layers 3/4.
Advanced TCP protection
Detect and mitigate sophisticated out-of-state TCP attacks such as randomized and spoofed ACK floods, or SYN and SYN-ACK floods.
Advanced DNS protection (beta)
Protect against DNS-based DDoS attacks, specifically sophisticated and fully randomized DNS attacks such as random prefix attacks.
Availability
| Free | Pro | Business | Enterprise | Enterprise with add-on | |
Availability | Yes | Yes | Yes | Yes | Yes |
Standard, unmetered DDoS | Yes | Yes | Yes | Yes | Yes |
| Yes | Yes | Yes | Yes | Yes | |
| Yes | Yes | Yes | Yes | Yes | |
Managed rules customization | Yes | Yes | Yes | Yes, with Log action | Expression fields & multi-rule support |
| No | No | Yes | Yes | Yes | |
| Only error adaptive rules | Only error adaptive rules | Only error adaptive rules | Only error adaptive rules | All adaptive rules | |
Traffic profiling signals for | Error rates only | Error rates only | Error rates & historical trends | Error rates & historical trends | Error rates & historical trends, client country, user agent, query string, ML-scores |
| Available to Magic Transit customers | Available to Magic Transit customers | Available to Magic Transit customers | Available to Magic Transit customers | Available to Magic Transit customers | |
| Available to Magic Transit customers | Available to Magic Transit customers | Available to Magic Transit customers | Available to Magic Transit customers | Available to Magic Transit customers | |
| Yes | Yes | Yes | Yes | Advanced alerts with filtering |