DDoS Protection review

For infrastructure that attracts attacks, Cloudflare’s DDoS protection is a major reason to sleep well at night. It is unmetered on every plan, so an attack does not lead to a surprise bill or a null-route. Mitigation is automatic at both L3/4 and L7.

The managed rulesets have sensible defaults and can be tuned when they misfire. The analytics are detailed enough to understand an attack afterward.

Multi-hundred-gigabit attacks get absorbed without a single alert firing on the customer side. That’s the product working exactly as advertised, and the industry pricing model it broke (paying per attack, or per Gbps of protection) deserved to die.