---
description: Protect your network infrastructure from DDoS attacks with Magic Transit.
title: Cloudflare Magic Transit
image: https://developers.cloudflare.com/og-docs.png
---

[Skip to content](#main-content)

> Documentation Index  
> Fetch the complete documentation index at: https://developers.cloudflare.com/magic-transit/llms.txt  
> Use this file to discover all available pages before exploring further.

# Cloudflare Magic Transit

Last updated Aug 24, 2026|Copy as Markdown|[View as Markdown](https://e8aee267.previews.developers.cloudflare.com/magic-transit/index.md)|[Agent setup](https://e8aee267.previews.developers.cloudflare.com/agent-setup/)

Secure your network and improve performance at Cloudflare scale.

Enterprise-only

Magic Transit is a network security and performance solution that offers Distributed Denial of Service (DDoS) protection, traffic acceleration, and more for on-premises, cloud-hosted, and hybrid networks.

* **DDoS mitigation and protection**: Instead of relying on local infrastructure that large DDoS attacks can overwhelm, Magic Transit uses the [global Cloudflare Network ↗](https://www.cloudflare.com/network/) to ingest and mitigate attacks close to their source.
* **Traffic acceleration**: Magic Transit takes advantage of the Cloudflare global network to reduce latency and ensure that requests always have a data center nearby.

Learn more [about how Magic Transit works](https://e8aee267.previews.developers.cloudflare.com/magic-transit/about/) and how to [get started](https://e8aee267.previews.developers.cloudflare.com/magic-transit/get-started/).

---

## Features

[Tunnel health checks](https://e8aee267.previews.developers.cloudflare.com/magic-transit/reference/tunnel-health-checks/)

Magic Transit sends health check probes to monitor network status and the health of specific network components.

Learn about health checks

[Traffic steering](https://e8aee267.previews.developers.cloudflare.com/magic-transit/reference/traffic-steering/)

Magic Transit steers traffic along tunnel routes based on priorities you define during the onboarding process.

Learn about traffic steering

[Cloudflare IPs](https://e8aee267.previews.developers.cloudflare.com/magic-transit/cloudflare-ips/)

Use Cloudflare-owned IP addresses if you want to protect a smaller network and do not meet Magic Transit's `/24` prefix length requirements.

Use Cloudflare IPs

[BGP peering (beta)](https://e8aee267.previews.developers.cloudflare.com/magic-transit/how-to/configure-routes/#configure-bgp-routes)

Use BGP peering between your networks and Cloudflare to automate adding or removing networks and subnets, and take advantage of failure detection and session recovery features.

Use BGP peering (beta)

---

## Related products

[Cloudflare Network Firewall](https://e8aee267.previews.developers.cloudflare.com/cloudflare-network-firewall/)

Cloudflare Network Firewall is a firewall-as-a-service (FWaaS) delivered from the Cloudflare global network to protect office networks and cloud infrastructure with advanced, scalable protection.

[Cloudflare Network Interconnect](https://e8aee267.previews.developers.cloudflare.com/network-interconnect/)

Cloudflare Network Interconnect (CNI) allows you to connect your network infrastructure directly with Cloudflare instead of using the public Internet for a more reliable and secure experience.

[DDoS Protection](https://e8aee267.previews.developers.cloudflare.com/ddos-protection/)

Cloudflare DDoS protection secures websites, applications, and entire networks without compromising legitimate traffic performance.

[Bring Your Own IP (BYOIP)](https://e8aee267.previews.developers.cloudflare.com/byoip/)

Get Cloudflare's security and performance while using your own IPs. With Bring Your Own IP (BYOIP), Cloudflare announces your IPs in all Cloudflare locations.

---

## More resources

### [Data Center Protection](https://e8aee267.previews.developers.cloudflare.com/learning-paths/data-center-protection/concepts/)

Follow a guided learning path to set up Magic Transit, configure DDoS protection, and go live with your network.

### [Reference Architecture](https://e8aee267.previews.developers.cloudflare.com/reference-architecture/architectures/magic-transit/)

Deep dive into the key architecture, functionalities, and network deployment options of Cloudflare Magic Transit.

Was this helpful?

YesNo

## On this page

[![](https://e8aee267.previews.developers.cloudflare.com/_astro/logo.te5VL_aD.svg)Docs](https://e8aee267.previews.developers.cloudflare.com/)

```json
{"@context":"https://schema.org","@type":"WebPage","@id":"https://developers.cloudflare.com/magic-transit/#page","headline":"Overview · Cloudflare Magic Transit docs","description":"Protect your network infrastructure from DDoS attacks with Magic Transit.","url":"https://developers.cloudflare.com/magic-transit/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-08-24","publisher":{"@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com/"},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}}
```