Introducing Programmable Flow Protection: custom DDoS mitigation logic for Magic Transit customers

Cloudflare introduces Programmable Flow Protection, a beta Magic Transit feature that enables customers to upload custom eBPF programs to Cloudflare’s global network to implement stateful, protocol-aware DDoS mitigations for custom UDP protocols (including challenges and flow tracking). The post describes architecture, helper APIs, example eBPF code for filtering and challenging traffic, and guidance for enterprise customers to deploy the feature.