Introducing Programmable Flow Protection: custom DDoS mitigation logic for Magic Transit customers
Mar 31, 2026Anita Tenjarla, Alex Forster, Cody Doucette, Venus Xeon-Blonde
Summary
Introduced Programmable Flow Protection for Magic Transit customers, enabling custom DDoS mitigation logic for UDP-based protocols using eBPF. This allows customers to define 'good' and 'bad' packets based on proprietary protocol knowledge and deploy this logic across Cloudflare's global network. The system integrates with existing DDoS mitigation systems and provides stateful tracking and challenge mechanisms.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack