Cloudflare Spectrum
Layer 4 reverse proxy with DDoS protection for any TCP or UDP application.
- Provider
- cloudflare
- Kind
- Load balancer
- Category
- Edge
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| argoSmartRouting | boolean | — | no | false | inherited |
| connectionPreserving | boolean | — | no | false | inherited |
| edgeTlsTermination | enum | off | flexible | full | full-strict | no | off | inherited |
| global | boolean | — | no | false | ▸ true |
| hashing | enum | round-robin | least-connections | ecmp | maglev | consistent | random | no | round-robin | inherited |
| healthChecks | boolean | — | no | true | ▸ false |
| instances | integer | — | no | — | inherited |
| layer | enum | l4 | l7 | no | l7 | ▸ l4 |
| managed | boolean | — | no | false | ▸ true |
| protocol | enum | tcp | udp | no | tcp | inherited |
| proxyProtocol | boolean | — | no | false | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "spectrum", component: "cloudflare-spectrum" }Server Load Balanceralibaba-slbAWS Application Load BalanceralbAWS Classic Load Balanceraws-classic-load-balancerAWS Global Acceleratoraws-global-acceleratorAWS Gateway Load Balanceraws-gwlbAWS Network Load BalancernlbAzure Application Gatewayazure-application-gatewayApplication Gateway for Containersazure-application-gateway-for-containersAzure Load Balancerazure-load-balancerCloudflare Load Balancingcloudflare-load-balancingApache HTTP Serverapache-httpdBFEbfeCaddycaddyContourcontourEnvoyenvoyF5 BIG-IPf5-big-ipHAProxyhaproxyKeepalivedkeepalivedGeneric load balancerload-balancerLoad balancerload-balancer-tierloxilbloxilbMetalLBmetallbNGINXnginxTraefiktraefikDigitalOcean Load Balancersdigitalocean-load-balancerGoogle Cloud Load Balancinggoogle-cloud-load-balancingIBM Cloud Load Balancer for VPCibm-load-balancerKubernetes Gatewayk8s-gatewayIngressk8s-ingressServicek8s-serviceOCI Load Balanceroci-load-balancerNetwork Load Balanceroci-network-load-balancerOpenStack Octaviaopenstack-octaviaLoad Balancer Unit (LBU)outscale-lbu
# yaml-language-server: $schema=../../schema/component.schema.json # Cloudflare Spectrum: layer 4 reverse proxy for any TCP or UDP application on anycast edge IPs. # "Spectrum configuration options": edge TLS termination is off unless flexible/full/full-strict is # chosen, Proxy Protocol is opt-in, and L3/4 DDoS protection is included. schemaVersion: "1" type: "component" id: "cloudflare-spectrum" kind: "load-balancer" provider: "cloudflare" docs: "https://developers.cloudflare.com/spectrum/reference/configuration-options/" defaults: managed: true layer: "l4" global: true healthChecks: false properties: protocol: type: "enum" values: ["tcp", "udp"] default: "tcp" edgeTlsTermination: type: "enum" values: ["off", "flexible", "full", "full-strict"] default: "off" proxyProtocol: type: "boolean" default: false argoSmartRouting: type: "boolean" default: false