---
title: Cloudflare DDoS protection · Cloudflare Magic Transit docs
description: "Cloudflare DDoS protection automatically detects and mitigates
  Distributed Denial of Service (DDoS) attacks using its Autonomous Edge. Magic
  Transit customers have access to additional features, such as:"
lastUpdated: 2025-09-25T14:23:12.000Z
chatbotDeprioritize: false
source_url:
  html: https://developers.cloudflare.com/magic-transit/ddos/
  md: https://developers.cloudflare.com/magic-transit/ddos/index.md
---

Cloudflare DDoS protection automatically detects and mitigates Distributed Denial of Service (DDoS) attacks using its Autonomous Edge. Magic Transit customers have access to additional features, such as:

* [Advanced TCP protection](https://developers.cloudflare.com/ddos-protection/advanced-ddos-systems/overview/advanced-tcp-protection/) (disabled by default)
* [Advanced DNS protection (beta)](https://developers.cloudflare.com/ddos-protection/advanced-ddos-systems/overview/advanced-dns-protection/)

Refer to [Cloudflare DDoS documentation](https://developers.cloudflare.com/ddos-protection/) for more information.

***

## Execution order

The execution order of the different mitigation systems for Magic Transit customers is the following:

1. [DDoS managed rulesets](https://developers.cloudflare.com/ddos-protection/managed-rulesets/)
2. [Advanced TCP Protection](https://developers.cloudflare.com/ddos-protection/advanced-ddos-systems/overview/advanced-tcp-protection/)
3. [Advanced DNS Protection](https://developers.cloudflare.com/ddos-protection/advanced-ddos-systems/overview/advanced-dns-protection/)
4. [Magic Firewall](https://developers.cloudflare.com/magic-firewall/)
