Introducing Programmable Flow Protection: custom DDoS mitigation logic for Magic Transit customers

Cloudflare launched Programmable Flow Protection in beta for Magic Transit Enterprise customers.

The feature lets users write custom eBPF logic to identify good and bad UDP traffic.

Customers can then apply drop or challenge actions at the edge across Cloudflare’s global network.

The goal is more precise DDoS defense for custom UDP services than broad blocking or simple rate limits.