Network-layer DDoS managed ruleset · DDoS protection

DDoS protection - Network-layer DDoS managed ruleset - 2024-03-12

Tue, 12 Mar 2024 08:00:00 EST

Rule ID	Description	Previous Action	New Action	Notes
...85fa2e98	Adaptive DDoS Protection for UDP Destination Ports (Available only to Enterprise accounts).	N/A	log	Enable rule that uses a customer's UDP destination port profile to mitigate traffic (log mode by default).

DDoS protection - Network-layer DDoS managed ruleset - 2023-07-31

Mon, 31 Jul 2023 08:00:00 EST

Rule ID	Description	Previous Action	New Action	Notes
...aa772b5c	Adaptive DDoS Protection for Location-Based UDP (Available only to Enterprise accounts).	N/A	log	Enable UDP geolocation Adaptive DDoS rule

DDoS protection - Network-layer DDoS managed ruleset - 2023-04-17

Mon, 17 Apr 2023 08:00:00 EST

Previously, only a subset of rules were exposed publicly. In rare situations, these rules can cause false positives. When this happens, you can customize their behavior using overrides.

Besides these rules, the DDoS managed rules contain other rules that do not cause issues. Until now, these rules were not shown in the dashboard or referenced in the documentation.

Cloudflare now shows all rules in the dashboard, including these high-confidence rules. This means that packets matching these rules will now have the correct rule identifier. The newly published rules are read-only and you cannot disable them.

DDoS protection - Network-layer DDoS managed ruleset - 2022-12-02

Fri, 02 Dec 2022 08:00:00 EST

Rule ID	Description	Previous Action	New Action	Notes
...58e4914a	Adaptive DDoS Protection for UDP (Available only to Enterprise accounts).	log	log	Lower sensitivity to avoid false positives
...76d5e15c	Adaptive DDoS Protection for Other IPv6 Protocols (Available only to Enterprise accounts).	log	log	Lower sensitivity to avoid false positives
...8de83ef6	Adaptive DDoS Protection for IPv6 GRE (Available only to Enterprise accounts).	log	log	Lower sensitivity to avoid false positives
...938e978c	Adaptive DDoS Protection for IPv6 ESP (Available only to Enterprise accounts).	log	log	Lower sensitivity to avoid false positives
...9c173480	Adaptive DDoS Protection for ICMP (Available only to Enterprise accounts).	log	log	Lower sensitivity to avoid false positives
...ad8078b8	Adaptive DDoS Protection for IPv4 GRE (Available only to Enterprise accounts).	log	log	Lower sensitivity to avoid false positives
...ae3f5e4e	Adaptive DDoS Protection for ICMPv6 (Available only to Enterprise accounts).	log	log	Lower sensitivity to avoid false positives
...c7dc52df	Adaptive DDoS Protection for Other IPv4 Protocols (Available only to Enterprise accounts).	log	log	Lower sensitivity to avoid false positives
...e4e7541c	Adaptive DDoS Protection for IPv4 ESP (Available only to Enterprise accounts).	log	log	Lower sensitivity to avoid false positives