- Home
- DDoS Protection Software
- Cloudflare Magic Transit
On the recordRead 2 Oct 202612 facts
Cloudflare Magic Transit
San Francisco, California, United States
Plans and prices
Custom Pricing
Priced on request
Pricing by request · Enterprise-only
Read 2 Oct 2026 · cloudflare.com
On the record
- Address requirement
- Using Magic Transit requires a publicly routable IP address block of at least /24, unless the customer uses a Cloudflare-owned IP address.developers.cloudflare.com · read 2 Oct 2026
- Availability
- Magic Transit is enterprise-only and is not a self-serve product; prospective customers are asked to engage Cloudflare’s team to scope their configuration.developers.cloudflare.com · read 2 Oct 2026
- Connections
- Magic Transit connects to origin infrastructure using anycast GRE tunnels over the Internet or Cloudflare Network Interconnect through physical or virtual interconnects.developers.cloudflare.com · read 2 Oct 2026
- How it works
- Cloudflare announces a customer’s IP address space using BGP and uses anycast to ingest traffic, inspect it, filter or steer it, and send it to the customer’s origin.developers.cloudflare.com · read 2 Oct 2026
- Integrations
- Standard Network Firewall features include integration with Cloudflare WAN; the Magic Transit Virtual Network can transport packets between tunnels, interconnects, Cloudflare Load Balancer, and Zero Trust connections.developers.cloudflare.com · read 2 Oct 2026
- Mitigation speed
- Cloudflare says malicious traffic is usually identified and blocked at the nearest Cloudflare data center within three seconds.cloudflare.com · read 2 Oct 2026
- Network firewall
- Magic Transit users automatically receive standard Cloudflare Network Firewall features, including filtering rules, a programmable API, and per-rule traffic analytics.developers.cloudflare.com · read 2 Oct 2026
- Notifications
- Tunnel health alerts can be sent by email, webhook, or PagerDuty when tunnel health falls below a configured service-level objective.developers.cloudflare.com · read 2 Oct 2026
- Purpose
- Magic Transit provides DDoS protection, traffic acceleration, and other network security and performance services for on-premises, cloud-hosted, and hybrid networks.developers.cloudflare.com · read 2 Oct 2026
- Regional limitation
- Cloudflare’s China Network does not yet support Magic Transit.developers.cloudflare.com · read 2 Oct 2026
- Security compliance
- Cloudflare says its SOC 2 Type II report covers security, confidentiality, and availability controls and is available to customers through the dashboard or under NDA.cloudflare.com · read 2 Oct 2026
