Preview Mode
Documentation

Distributed denial-of-service (DDoS) protection

DDoS protection that mitigates the biggest, most advanced attacks

DDoS attacks can slow or shut down services, but Cloudflare stops them all. With 348 Tbps of network capacity, Cloudflare has mitigated some of the largest DDoS attacks ever recorded, without slowing down performance for customers.

BENEFITS OF CLOUDFLARE DDOS PROTECTION
Shield icon
Massive network capacity

Cloudflare has 348 Tbps of network capacity, which is 23x larger than the biggest DDoS attack ever recorded

Time blue
Set up in minutes

Turning on DDoS protection is as easy as flipping a switch. Under attack? Use our Under Attack hotline to get protection in minutes: +1 (888) 99 FLARE.

24/7 email & phone support

Global, 24/7/365 email and emergency phone support (Enterprise plans). Plus on-demand resources, guides, and best practice implementation.

Lightning bolt icon
Eliminate slow performance and downtime

Whether defending applications, networks, or websites from DDoS, Cloudflare makes you faster and more reliable.

HOW IT WORKS

Block attack traffic with a global network

How Cloudflare DDoS Protection works - illustration

We mitigate DDoS attacks from the nearest location in more than 335 cities around the world, without sending traffic to faraway scrubbing centers.

Cloudflare protects web applications, TCP/UDP applications, and networks and data centers alike, across OSI layers 3, 4, and 7.

How Cloudflare DDoS Protection works - illustration

Learn about five best practices for mitigating DDoS attacks

What our customers are saying

"We experienced a marked increase in malicious traffic from what appeared to be well-financed, professional groups, but Cloudflare absorbed the attacks directed towards us. We easily secured our public web infrastructure behind the global network’s best-in-class DDoS and zero-day exploit protection."

Head of Cloud and Virtualization Services — Porsche Informatik

Top DDoS protection use cases

Cloudflare DDoS protection keeps your services and infrastructure reliable and safe.

Secure, reliable websites and web apps

DDoS protection ensures websites and applications remain online and secure, ensuring a positive user experience.

Applications icon
Secure TCP/UDP applications

Cloudflare Spectrum protects applications built with any protocols, including custom protocols. Ensure uptime for any box, container, or virtual machine.

Secure infrastructure

Protect your network, data centers, and infrastructure against layer 3 and 4 DDoS attacks with Magic Transit.

Protecting organizations worldwide from the latest DDoS attacks


Website DDoS Protection

Website DDoS protection is Free in all application services plans, plus much more!

Starting at $0

Billed monthly

KEY FEATURES

Included Free in all Application Service plans, plus Free CDN & Free SSL

Unlimited & unmetered DDoS attack mitigation

Easy set up from the Cloudflare dashboard or API

DDoS protection for websites (HTTP/HTTPS)

Optional upgrades: Firewall (WAF), site acceleration, advanced bot mitigation & more


Learn More


Spectrum: Application DDoS Protection

Protect your TCP/UDP applications against DDoS attacks with our pay-as-you-go service.

Custom Pricing

Billed annually

KEY FEATURES

Proxy any TCP/UDP traffic through Cloudflare Spectrum

Easy set up from the Cloudflare dashboard or API

Integrated performance benefits

Load balance L4 traffic across multiple servers


Learn More


Magic Transit: Network DDoS Protection

Protect your network, data centers and infrastructure against DDoS attacks.

Custom Pricing

Billed annually

KEY FEATURES

Over 321 Tbps of network capacity

Mitigate most attacks in under 3 seconds

Integrate via BGP routing and GRE encapsulation

Native integration with L7 services (CDN, WAF, Bot Management, etc.)

Support for all IP services (TCP, UDP, IPSec, VoIP, custom protocols)


Learn more

Resources

Resources card - Thin top orange line  - image
Five best practices for mitigating DDoS attacks

Learn how to defend against rapidly evolving distributed denial-of-service (DDoS) threats and address vulnerabilities at every layer.

Get the whitepaper
Resources card - Thin top orange line  - image
The State of DDoS Threats: Q3 2023 Report

By analyzing traffic patterns across our global network, we have identified nascent DDoS threats. By understanding these threats early, your organization can prevent attacks from disrupting business operations.

Get the report
Resources card - Thin top orange line  - image
DNS and the threat of DDoS

In recent years, attackers have been able to take down essential services and huge patches of the Internet using large distributed denial-of-service (DDoS) attacks against DNS. Learn how Cloudflare uses its network architecture to mitigate these attacks.

Get the whitepaper

Get Cloudflare DDoS protection for your enterprise