Use cloudflare to defend against DDoS for free

According to the Cloudflare Official account said ,Cloudflare Provided in all service plans including free plans DDoS Defense services do not count capacity and are not capped .Cloudflare Our global network now covers 90 Several countries / region , Have 37Tbps Network capacity , And around the world 200 Deploy data centers in cities .Cloudflare Every data center in has been enabled with full DDoS Mitigation function .

Why ignore the capacity , No upper limit ？

according to Gartner Recently published by Thomas Lintemuth,Patrick Hevesi and Sushil Aryal Write a report ——《DDoS The solutions of cloud cleaning center are more 》（ID G00467346）,Cloudflare Get the most “ High marks ” The rating .Cloudflare The network capacity of is almost equal to that of other 6 Home is the leading DDoS The sum of the total cleaning capacity of the provider . Whether it's in the face of 500Gbps The above large DDoS attack , still 10Gbps The following high frequency small attacks ,Cloudflare Can ensure the security of users' online assets .

Cloudflare Global networks are different from traditional networks DDoS Mitigation mode , In the traditional mode DDoS Defense needs to introduce website capacity into the cleaning center , therefore DDoS Mitigation service providers will charge for the additional bandwidth occupied by attack traffic . Thanks to the Anycast Technology and global distributed architecture ,Cloudflare It can be analyzed and cleaned near the attack source . In this way ,Cloudflare It eliminates the source return delay caused by bypassing the cleaning center ; meanwhile ,Cloudflare Charge only for clean normal traffic —— Therefore use Cloudflare DDoS Solution , The cost will become more controllable ！

in addition to , Automated edge analysis and edge enforcement DDoS The mitigation function makes Cloudflare Can mitigate attacks at an unprecedented speed .Cloudflare It can be found in 10 In seconds DDoS attack .

Can you defend CC？

Use Cloudflare Rate Limiting or Cloudflare Basic firewall tools can defend against cc attack . For more complex situations , For example, applications or games are deployed globally , Unable to get IP Or geographical location to distinguish whether the traffic comes from users with real needs ,Cloudflare Will use the white list mode , Insert corresponding fingerprint and field ,Cloudflare You can complete these tasks before the business goes online , also Cloudflare There are already cases in this regard .

Integration is Cloudflare Design principles

Cloudflare A key design principle when building products is integration .Cloudflare Of DDoS The solution integrates seamlessly with other products , Include WAF、Bot management 、CDN etc. .Cloudflare Provide comprehensive and integrated security solutions , Enhance security while supporting performance . Both performance and safety are available ！

Cloudflare Provide... In all service plans DDoS Defense Services , among , The main difference between free plan and enterprise plan is ： The enterprise plan also includes advanced mitigation capabilities 、 Detailed report 、 Rich logs 、 Efficiency improvement and fine-grained control .Cloudflare There are also specialized customer success and solution engineers to connect with the customers of the enterprise plan .