Website Security & Threat Management
Introducing Programmable Flow Protection: custom DDoS mitigation logic for Magic Transit customers

Introducing Programmable Flow Protection: custom DDoS mitigation logic for Magic Transit customers

3/31/2026 · Anita Tenjarla, Alex Forster, Cody Doucette, Venus Xeon-Blonde

What this post added

Introduced Programmable Flow Protection for Magic Transit customers, enabling custom DDoS mitigation logic for UDP-based protocols using eBPF. This allows customers to define 'good' and 'bad' packets based on proprietary protocol knowledge and deploy this logic across Cloudflare's global network. The system integrates with existing DDoS mitigation systems and provides stateful tracking and challenge mechanisms.

Read the original post ↗