Your privacy is important to us.
Fast, globally distributed and intelligent protection against sophisticated DDoS attacks
Protect your Internet properties with a cloud-based, always-on DDoS protection, powered by the intelligence harnessed from Cloudflare’s always learning global network
Cloudflare’s layered security approach combines multiple DDoS mitigation capabilities into one service. It prevents disruptions caused by bad traffic, while allowing good traffic through, keeping websites, applications and APIs highly available and performant.
Ease of Use and Management
Cloudflare’s DDoS protection is built on an intuitive interface that empowers users to quickly and easily protect their Internet properties against emerging and sophisticated DDoS threats, with just a few clicks.
Cost-effective
All Cloudflare plans offer unlimited and unmetered mitigation of distributed denial-of-service (DDoS) attacks, regardless of the size of the attack, at no extra cost. No penalty for spikes in the network traffic associated with a distributed attack.
Fast, Automated Mitigation
Unlike other industry solutions, Cloudflare’s DDoS protection does not have bottleneck dependency on limited ‘scrubbing centers’. Each of our points of presence globally hosts all Cloudflare security services, enabling a distributed and automated mitigation model against any DDoS attack.
Threat Intelligence At-Scale
Cloudflare’s DDoS protection is fueled by the intelligence of its global network, that protects over 20 million+ websites and has over 1 billion unique IP passing through it every day. This intelligence enables a unique vantage point to protect against the most sophisticated attacks.
Integrated Security and Performance
Cloudflare’s DDoS protection is designed to integrate, learn and operate seamlessly with other security and performance products including Web Application Firewall, Bot Management, Magic Transit, Load Balancer, CDN and more.
Analyze your data, your way
Cloudflare Analytics enables you to analyze DDoS events through Cloudflare’s dashboard or GraphQL. Alternately, Cloudflare logs can be integrated with leading third-party SIEMs to seamlessly integrate with your business processes.
Business continuity and delivering an uninterrupted customer experience is of paramount importance in today’s digital world. For fast and efficient mitigation, automation is key. Cloudflare’s DDoS protection is powered by our proprietary and fully automated mitigation systems - Gatebot and DosD
Our automation systems observe the network, note the anomalies, understand the targets of attacks and related metadata to perform appropriate mitigation action. Global, distributed network capacity ensures high service availability even in the face of big and sophisticated attacks, by automatically diverting traffic to the next closest point of presence.
Ease of use and management is a key design tenet for Cloudflare’s DDoS protection. DDoS attacks are blocked at the edge to keep your origin servers up and available agnostic of where they reside - on-premise, cloud or in a hybrid environment.
Cloudflare’s DDoS protection is built to operate and integrate seamlessly with security and performance products including WAF, Rate Limiter, Bot Management, CDN, Argo smart routing, website optimizations and the latest web standards.
Cloudflare Logs integrate with third-party monitoring tool sets through APIs, to provide comprehensive visibility and actionable metrics.
Cloudflare’s global Anycast network spans across 190+ cities and operates within 100 milliseconds of 99% of the Internet-connected population in the developed world. Each point of presence across these 190+ locations runs the entire stack of Cloudflare’s security services.
This modern design approach enables faster mitigation as compared to slower legacy design that relies on traffic being redirected to limited ‘scrubbing centers’. With the Anycast network, an attack against a single IP will be delivered to multiple locations. 30 Tbps of network capacity allows it to handle any modern distributed attack, including those targeting DNS infrastructure.
Key Results
200,000
rate-limited requests per day.
30%
bandwidth savings.
41,000
WAF blocks per month.
Read the Case Study
Ben Hamilton
Information Security Architect
