Cloudflare Magic Transit

cloudflare DDoS protection plancloudflare-magic-transit

BGP-announced IP prefixes scrubbed on Cloudflare's network and delivered back over GRE, IPsec or CNI.

Provider: cloudflare
Kind: DDoS protection plan
Category: Security
Official docs: https://developers.cloudflare.com/magic-transit/

Properties · 4 set by this component

property	type	values	required	kind default	this component
adaptiveThresholds	boolean	—	no	—	inherited
alwaysOn	boolean	—	no	—	▸ true
deploymentMode · component property	enum	always-on \| on-demand	no	always-on	inherited
managed	boolean	—	no	false	▸ true
minimumPrefixLength · component property	integer	—	no	24	inherited
protectedResourceCount	integer	—	no	—	inherited
scope	enum	network \| application \| both	no	—	▸ network
telemetry	boolean	—	no	—	▸ true
tunnelType · component property	enum	gre \| ipsec \| cni	no	—	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "magic-transit", component: "cloudflare-magic-transit" }

Other DDoS protection plan products · 10

Anti-DDoS Originalibaba-anti-ddos-originalibabacloudddos-protection Anti-DDoS Proalibaba-anti-ddos-proalibabacloudddos-protection Game Shieldalibaba-game-shieldalibabacloudddos-protection AWS Shieldaws-shieldawsddos-protection Azure DDoS Protectionazure-ddos-protectionazureddos-protection Cloudflare DDoS Protectioncloudflare-ddos-protectioncloudflareddos-protection Generic DDoS protection planddos-protectionddos-protection NETSCOUT Arbor DDoSnetscout-arborddos-protection Radware DefenseProradware-defenseproddos-protection DigitalOcean DDoS Protectiondigitalocean-ddos-protectiondigitaloceanddos-protection

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Magic Transit: BGP-announced IP prefixes (a /24 minimum, or Cloudflare IPs for smaller networks)
3# are scrubbed on the Cloudflare network and handed back over GRE, IPsec or CNI tunnels with
4# health checks and priority-based steering ("Magic Transit overview").
5schemaVersion: "1"
6type: "component"
7id: "cloudflare-magic-transit"
8kind: "ddos-protection"
9provider: "cloudflare"
10docs: "https://developers.cloudflare.com/magic-transit/"
11defaults:
12  managed: true
13  scope: "network"
14  alwaysOn: true
15  telemetry: true
16properties:
17  deploymentMode:
18    type: "enum"
19    values: ["always-on", "on-demand"]
20    default: "always-on"
21  tunnelType:
22    type: "enum"
23    values: ["gre", "ipsec", "cni"]
24  minimumPrefixLength:
25    type: "integer"
26    default: 24

The same page as markdown, for an agent: /catalogue/components/cloudflare-magic-transit.md