Magic Transit

Magic Transit

Unmatched, hardware-free Layer 3/4 DDoS protection for your network

Talk to an expert Request Magic Transit demo

DDoS protection at massive scale

Magic Transit uses Cloudflare's global network to absorb and filter attacks, eliminating the need for backhauling traffic to DDoS scrubbing centers.

Ultra-low Time to Mitigate (TTM)

Malicious traffic is identified and blocked at a Cloudflare data center closest to the source, usually within three seconds, ensuring minimal disruption.

Reduce your TCO

Replace expensive hardware and increase operational agility with network functions delivered and billed as a service, reducing your total cost of ownership.

Background Pattern

Magic Transit

You can use Magic Transit to:

See real-world examples of Cloudflare Magic Transit

Protect against layer 3 DDoS

With data from attacks observed across our global network, Cloudflare can block and mitigate any type of DDoS attack in seconds.

Delivers defense in depth

Use Cloudflare's 330-city global network at the front lines of your network protection, providing a comprehensive defense strategy.

A part of Cloudflare’s comprehensive DDoS protection

Works together with Spectrum (layer 4) and Cloudflare DDoS (layer 7) to address different techniques in the cyberattack kill chain.

Helping organizations worldwide protect themselves from DDoS attacks

See case studies of organizations that have successfully protected themselves from DDoS attacks using Magic Transit.

Shopify

"

For Shopify, the real challenge is not about how many different pieces of complex technology we can use but the opposite. Cloudflare helps us find a simple way to achieve something very complex that we can scale and maintain. "

Duncan Davidson VP of Developer Productivity

Powerful primitives, seamlessly integrated

Built on systems powering 20% of the Internet, Magic Transit runs on the same infrastructure Cloudflare uses to build Cloudflare. Enterprise-grade reliability, security, and performance are standard.

Browser Run Automated browsers

Containers Any language, anywhere

Durable Objects Stateful compute

Sandboxes Secure code execution

Workers Global serverless functions

Workers for Platforms Programmable Platform Solutions

Workflows Process orchestration

Artifacts Git-native versioned storage

D1 Serverless SQL

Data Platform Ingest, Catalog & Query

Hyperdrive Global databases

Queues Message processing

R2 Egress-free storage

KV Ultra-fast key-value storage

Agents Build stateful AI agents

AI Gateway AI observability

AI Search Instant retrieval

Vectorize Vector database

Workers AI Edge AI models

DDoS Protection Mitigation Solutions

Rate Limiting Abuse prevention

SSL Secure Your Site with SSL

Turnstile A CAPTCHA Replacement Solution

WAF Web Application Firewall

Magic Transit DDoS Protection for Networks

Network & Content Delivery

Bot Management Block bad bots

CDN Faster delivery & caching

Load Balancing Zero downtime

TURN / SFU Real-time infra

SASE / Zero Trust

SASE Cloudflare SASE platform

Access Safe access to private applications

Data Loss Prevention Protect sensitive data

Secure Web Gateway DNS filtering & Secure Browsing

WAN Cloud-delivered enterprise networking

Mesh Agents private network

Build without boundaries

Join thousands of developers who've eliminated infrastructure complexity and deployed globally with Cloudflare. Start building for free — no credit card required.

Start building for free