Globally Load Balanced CDN

Our 194 data centers located across the globe provide visitors with location-based access to your website, while removing latency and improving performance.

Static Content Caching

Cloudflare saves you CPU resources and bandwidth by serving your static content directly from our global data centers.

Instant Full Cache Purge

Purge the entire Cloudflare cache or just a single file without waiting.

Min Cache TTL Expiry

Cloudflare respects all existing headers, unless you choose to overwrite them. The minimum edge cache expire TTL sets the refetch time for when Cloudflare checks the origin server for a new resource.

Client Max Upload Size (MB)

The amount of data visitors can upload to your website in a single request.

TCP Turbo

TCP Turbo automatically chooses the TCP settings to further accelerate your website. Accelerate latency and throughput with custom-tuned TCP optimizations. Enabled automatically for Pro, Business, and Enterprise customers.

Cache Purge - By Tag

Cache-Tags are assigned to cached content via a Cache-Tag response header, and are stored as metadata with cached objects so that global purges take only seconds, targeting a granular, finite set of cached objects.

Cache Purge - By Host

Purge by host offers Cloudflare customers who manage multiple subdomains the ability to purge the cache on a per-host basis. For example, if the Cloudflare domain example.com wanted to purge everything on staging.example.com, purge by host enables this with a single API call.

Custom Cache Keys

Custom Cache Keys allow caching to be extended to something more specific than just the URL, this allows you to extend caching beyond just static files.

Prioritized IP Ranges

Enterprise Internet assets are placed on Cloudflare dedicated IP ranges, providing prioritized routing and protection to ensure maximum speed and availability.

Argo Smart Routing

Argo's smart routing algorithm uses real-time network intelligence to route traffic through the fastest Cloudflare network paths, while maintaining open, secure connections to eliminate latency imposed by connection-setup. Pricing for Free, Pro, and Business Plans: $5 per month; First 1 GB is free and $0.10 per GB thereafter.

Tiered Caching

Argo’s tiered caching technology uses regional tier 1 Cloudflare data centers to propagate content to Cloudflare’s global network, minimizing static content requests to your server and reducing costs.

Load Balancing

Usage based pricing is determined by the number of DNS requests made by visitors.

Pricing

Base Fee

Free, Pro, and Business Plan pricing:

• Up to 2 origin servers: $5 per month
• Each additional origin, up to 20: $5 per month

Enterprise customers: Includes 2 origin servers

Usage-based Fee

Free, Pro, and Business Plan pricing:

• First 500k DNS requests are free
• $0.50 per every 500k DNS requests after

Enterprise customers can negotiate a reduced rate through custom pricing.

Global Load Balancing (Geo-based Routing)

Global Load Balancing ensures that visitors receive dynamic content from origin servers closest to them.

Pricing

Free, Pro, and Business Plan Pricing: enable for $10 per month.

Enterprise customers: Included with data center control.

Load Balancing Health Checks

Health checks continually ping origin servers to determine if it's online.

Pricing

Frequency of Health Checks

Free, Pro, and Business plan pricing:

• Every 60 seconds: included
• Every 30 seconds: additional $10 per month
• Every 15 seconds: additional $15 per month

Enterprise customers:includes health checks every 5 seconds.

Number of Health Check Locations

Free, Pro, and Business plan pricing:

• 1 location included
• Up to 3 locations: additional $10 per month
• Up to 5 locations: additional $15 per month

Enterprise customers:includes health checks from every Cloudflare data center.

China Network

Gain access to Cloudflare's 20 data centers across China.

Stream

Cloudflare Stream is an easy-to-use, affordable, on-demand video streaming platform.

Pricing

Free, Pro, and Business Plan pricing:

• $1 per thousand minutes viewed per month
• $5 per thousand minutes of video stored per month

Enterprise customers can negotiate a reduced rate through custom pricing.

Stream Delivery

Cloudflare’s Stream Delivery offers caching and delivery of video content through its 194 data centers around the globe.

Page Rules

Set up forwarding, extend or exclude caching, require SSL connections, and generally exercise fine-grained control over how Cloudflare interacts with your site on a page-by-page basis.

Accelerated Mobile Links (AMP)

Cloudflare’s Accelerated Mobile Links, powered by AMP, loads AMP-enabled external links inside of a viewing window, within the same tab, at least 3 times faster than normal mobile pages.

IPv6, HTTP/2, SPDY

Support both IPv4 and IPv6 connections to your site without a single change to your existing infrastructure. HTTP/2 is the latest update to the HTTP protocol. HTTP/2 brings advancements in efficiency, security, and speed, particularly on high-latency and mobile connections. Cloudflare provides automatic HTTP/2 and SPDY coverage for your visitors.

WebSockets

A WebSocket is a persistent full-duplex protocol which provides low latency client-server communication without the overhead of HTTP.

Async JavaScript Loading with Rocket Loader

Automatically optimizes your pages to minimize the number of network connections and ensure even third party resources won't slow down page rendering.

Image Optimization with Polish

Polish applies "lossless" or optional "lossy" image optimization to reduce your image sizes by 35% on average.

Mobile Optimization

Mirage automatically optimizes image loading through virtualized and lazyloaded images. It detects the browser type of a visitor and optimizes performance for the particular device, improving the performance of images on a mobile connection.

Header Rewrites

Used to rewrite headers if customers don’t have a way of controlling their headers. For example, if your Amazon S3 bucket requires a specific host header set in order to fetch assets.

Image Resizing

Resize images for a variety of device types and connections from a single-source primary image. Images can be manipulated by dimensions, compression ratios, and format (WebP conversion where supported). Included with Business and Enterprise plans (with limits).

Pricing

Free, Pro plan: Not available.

Business plan: Up to 100k images served per month, included. $10 per month per additional 100k images served.

Enterprise customers: Up to 10 million images served per month, included.

Key-value Storage with Workers

Workers Unlmiited includes:

• Key-value storage space: 1GB
• Key-value reads: 10 million per month
• Key-value writes: 1 million per month
• Key-value deletes: 1 million per month
• Key-value lists: 1 million per month

Usage Based Charges

• Key-value storage space: $0.50 per 1GB per month
• Key-value reads: $0.50 per 1 million reads per month
• Key-value writes: $5 per 1 million writes per month
• Key-value deletes: $5 per 1 million deletes per month
• Key-value lists: $5 per 1 million lists per month

DDoS Mitigation

Cloudflare’s unmetered mitigation of DDoS stops illegitimate volumetric traffic at the Cloudflare edge. All Cloudflare plans include unmetered mitigation without fear of being dropped.

Enterprise DDoS Mitigation

Cloudflare’s enterprise-grade mitigation of DDoS attacks against layers 3, 4, & 7 includes prioritized IP ranges and routing, ensuring maximum speed and availability.

Argo Tunnel

Using a lightweight agent installed on origin infrastructure, including containers or virtual machines, Cloudflare creates an encrypted tunnel between its nearest data center and an application’s origin server without opening a public inbound port.

Cloudflare Access - Basic

Cloudflare Access protects internal resources by securing, authenticating and monitoring access per-user and by application. With Cloudflare Access, only authenticated users with the required permissions are able to access specific resources behind the Cloudflare edge.

Supports the following identity providers:

• Facebook
• Google
• GitHub
• Yandex

Pricing

Free, Pro, and Business Plan: $3 per user per month

Enterprise customers can negotiate a reduced rate through custom pricing.

Cloudflare Access - Premium

Support Cloudlfare Access Basic identify providers plus:

• Okta
• OneLogin
• Centrify
• Microsoft AzureAD
• GSuite

Pricing

Free, Pro, and Business Plan: $5 per user per month

Enterprise customers can negotiate a reduced rate through custom pricing.

Spectrum (for TCP/UDP)

Spectrum protects TCP applications and ports from volumetric DDoS attacks and data theft by proxying non-web traffic through Cloudflare’s Anycast network.

Deploy Intelligence to Identify New Threats

Cloudflare gets smarter about security threats as more sites join. Protection from attacks on one site is extended to the entire Cloudflare community within seconds.

Reputation-based Threat Protection

Cloudflare gets smarter about security threats as more sites join. Protection from attacks on one site is extended to the entire Cloudflare community within seconds.

Comment Spam Protection

Stop spammers from posting to your website.

Content Scraping Protection

Protect all of your content including text, images and email addresses from web scrapers with Cloudflare's ScrapeShield™ service.

Domain Protection

Custom Domain Protection for Cloudflare Registrar, available on the Enterprise Plan, protects your organization from domain hijacking with exclusively out-of-band verification of any changes to your Registrar account. Cloudflare is an ICANN accredited registrar providing secure domain registration for high-profile domains.

DDoS Alerts

Cloudflare will send you a real-time alert when our systems automatically detect and mitigate a DDoS attack.

DDoS Protection for SSH

Cloudflare Spectrum protects your SSH server from DDoS attacks of any size and kind. Better yet, SSH sessions are faster over the Cloudflare network than over the Internet.

DDoS Protection for Minecraft

Delivering immersive and secure gaming experiences to your Minecraft players around the world is a massive challenge — network latency and DDoS attacks contribute to the ‘lag’ and downtime of your Minecraft server. Solve this challenge with Cloudflare Spectrum – which helps power fast and reliable online gaming experiences.

Protection for RDP

Cloudflare Spectrum can help improve business productivity by helping IT teams deliver real-time, responsive, and reliable RDP experiences to their workforce.

Universal SSL Certificate

Cloudflare is compatible with your existing SSL configuration. If you do not currently use SSL, Cloudflare can provide you with SSL capabilities — no configuration required.

Dedicated SSL Certificate

Dedicated SSL Certificates allow you to secure multiple levels of your subdomains and include your fully qualified domain name in the Common Name (CN).

Pricing

Free, Pro, and Business Plan Pricing:

• $5 for Dedicated SSL Certificate
• $10 for Dedicated SSL Certificate with Custom Hostnames

Enterprise customers can negotiate a reduced rate through custom pricing.

Bring Your Own SSL Certificate

Bring your own dedicated SSL certificate (upload to our network; supports EV certificates).

Keyless SSL

Keyless SSL lets you route encrypted traffic through Cloudflare's global network, while retaining on-premise custody of private keys. SSL private keys never leave your on-premise infrastructure, and are not shared with anyone.

SSL/TLS For SaaS

Cloudflare’s SSL for SaaS solution allows the customers’ of SaaS providers to CNAME their custom domains to the SaaS provider’s subdomain. This offers SaaS customers the benefit of a branded and encrypted vanity domain. Cloudflare automatically handles certificate management and renewals. Learn more at cloudflare.com/saas/

Firewall Rules - Regex

Regular Expressions (regex), sometimes called a pattern, is an expression used to specify a set of strings. Like wildcards, but more powerful, regex gives you the ability to pattern-match text strings occuring in supported fields to target specific traffic.

User Agent Blocking Rules

Create a rule to block or challenge a specific User Agent from accessing your domain. This works similarly to Zone Lockdown, except the block examines incoming User-Agent strings rather than IPs. User Agent blocking applies to an entire zone, and sub-domains cannot not be specified.

Zone Lockdown Rules

Zone Lockdown allows for the whitelisting of specific IP addresses and IP ranges, whereby all other IPs are effectively blacklisted. This supports specific sub-domains and URLs and is useful to protect an administrative area from non-specified IP addresses.

OWASP Core Rulesets

Includes OWASP ModSecurity Core Rule Set automatically to protect you against the Top 10 vulnerabilities identified by the Open Web Application Security Project (OWASP).

Rate Limiting

Pricing

Free, Pro, and Business Plan:

• First 10,000 good requests are free
• $0.05 per 10,000 good requests thereafter

Enterprise customers can negotiate a reduced rate through custom pricing.

Rate Limiting Rules

The total number of individual rules per plan type, with which to instruct rate limiting how to function on your website, application, or API.

Rate Limiting Header Rules

The number of rules where the Header Response is used as a trigger. One header rule is already used by default to determine whether to count based on origin traffic or traffic served from the cache.

Advanced Bot Management

Stop bad bots from Credential Stuffing, Content Scraping/Spamming, Inventory Hoarding and Credit Card Stuffing types of attacks by leveraging smart data.

Captcha/JS Challenge

hCaptcha served to visitors matching the triggered rules, and JS Challenge will run a JavaScript challenge that validates whether the visitor is using a legitimate browser.

Bot Fight Mode

Basic bot mitigation

Super Bot Fight Mode

Bot reporting and advanced mitigation

Global Anycast DNS

Fast responsive times globally and nearinstant updates.

DNSSEC

DNSSEC ensures that a website’s traffic is safely directed to the correct servers, so that a connection to a website is not intercepted by a man-in-the-middle.

Custom Nameservers

Custom nameservers allow you to create your own, unique nameservers in place of your assigned Cloudflare nameservers.

Wildcard DNS

Cloudflare supports wildcard DNS at all plan levels. For Enterprise plans, Cloudflare will full proxy wildcards providing security and performance for these subdomains.

Wildcard DNS Record Proxy

For Enterprise plans, Cloudflare will full proxy wildcards providing security and performance for these subdomains.

Secondary DNS

Cloudflare can easily be setup as a secondary DNS provider. When records are edited with the primary DNS provider, the corresponding records at Cloudflare are automatically updated.

Multi-User Administrative Access

Invite others to manage the account as an Administrator. Invited Administrators have full control over the account except for managing members and changing billing information. Visit the ‘Members’ tab, in the new Account area within the Cloudflare dashboard to get started.

Role-based Access Control

Role-based access for Cloudflare accounts enables organizations to collaborate across one Cloudflare account, and use roles-based permissions to control access. Each user is assigned an individual API key and can use two-factor authentication to protect their own account.

SSO Support

The Cloudflare dashboard now supports Single Sign On (SSO) for ease of centralized identity and access management. Cloudflare Account Owners will be able to setup and define who can access their Cloudflare accounts with the same Identity Provider (IdP) they currently use.

Cache Analytics

Deeper exploration capabilities into what Cloudflare’s caching and content delivery services are doing for your web presence.

Site Analytics (resolution)

The Cloudflare analytics dashboard provides all customers with 30 days of data and the ability to magnify your data by time range scopes of 1 hour, 15 minutes, or 1 minute, depending on your plan type. - Free customers can magnify down to a 1 hour scope, for the last 24 hours - Pro and Business customers can magnify down to a 15 minute scope, for the last 6 hours - Enterprise customers can magnify down to a 1 minute scope, for the last 30 mintues

DNS Analytics (historical time)

View the history of your DNS queries by up to a certain amount of time.

Firewall Analytics (historical time)

Visualise and analyze all Firewall Events in one place to better understand your threat landscape. Identify, mitigate, and review attacks more effectively.

Load Balancing Analytics (historical time)

Survey the traffic distribution across your load balancers. Understand behavior during peak traffic and failover decisions made, with the option to filter by load balancer, pool, origin, and region.

Audit Logs

View and download the most recent changes made within your account via UI or API.

Request Logs

Cloudflare Enterprise customers have access to detailed logs of HTTP requests for their domains. These logs can be helpful for debugging, identifying configuration adjustments, or creating analytics, especially when combined with other data sources, such as application server logs.

PCI DSS 3.2

Bring your business into compliance with the latest PCI DSS 3.2 standards by enabling Cloudflare's web application firewall (WAF) and Modern TLS Only mode.

Uptime Service Credits

In the rare event of downtime, customers receive a service credit against the monthly fee, in proportion to the respective disruption and affected customer ratio.

Customer Success Manager led Onboarding

For all questions and topics related related to your account and relationship with Cloudflare, Enterprise customers have access to a designated customer success manager.

I’m Under Attack Support Engineer For Magic Transit

If suffering from an attack that thwarts current security configurations, our enterprise support team will apply additional rules or patches to protect your mission-critical web assets and support your uptime SLA.