
Cloudflare Magic Transit
The facts below are what the maker publishes about Cloudflare Magic Transit, checked and dated. Our editors have not written about it yet.
Plans and prices
From Cloudflare Magic Transit's own pricing page, checked 2 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Custom Pricing | Priced on request | Pricing by request · Enterprise-only |
The facts
Each one read from Cloudflare Magic Transit's own pages, with the date it was checked.
What it does
- Address requirement
- Using Magic Transit requires a publicly routable IP address block of at least /24, unless the customer uses a Cloudflare-owned IP address.checked 2 Oct 2026
- Availability
- Magic Transit is enterprise-only and is not a self-serve product; prospective customers are asked to engage Cloudflare’s team to scope their configuration.checked 2 Oct 2026
- Connections
- Magic Transit connects to origin infrastructure using anycast GRE tunnels over the Internet or Cloudflare Network Interconnect through physical or virtual interconnects.checked 2 Oct 2026
- How it works
- Cloudflare announces a customer’s IP address space using BGP and uses anycast to ingest traffic, inspect it, filter or steer it, and send it to the customer’s origin.checked 2 Oct 2026
- Integrations
- Standard Network Firewall features include integration with Cloudflare WAN; the Magic Transit Virtual Network can transport packets between tunnels, interconnects, Cloudflare Load Balancer, and Zero Trust connections.checked 2 Oct 2026
- Mitigation speed
- Cloudflare says malicious traffic is usually identified and blocked at the nearest Cloudflare data center within three seconds.checked 2 Oct 2026
- Network firewall
- Magic Transit users automatically receive standard Cloudflare Network Firewall features, including filtering rules, a programmable API, and per-rule traffic analytics.checked 2 Oct 2026
- Notifications
- Tunnel health alerts can be sent by email, webhook, or PagerDuty when tunnel health falls below a configured service-level objective.checked 2 Oct 2026
- Purpose
- Magic Transit provides DDoS protection, traffic acceleration, and other network security and performance services for on-premises, cloud-hosted, and hybrid networks.checked 2 Oct 2026
- Regional limitation
- Cloudflare’s China Network does not yet support Magic Transit.checked 2 Oct 2026
- Security compliance
- Cloudflare says its SOC 2 Type II report covers security, confidentiality, and availability controls and is available to customers through the dashboard or under NDA.checked 2 Oct 2026
The company
- Headquarters
- San Francisco, California, United Stateschecked 28 Sep 2026
Alternatives to Cloudflare Magic Transit
- 1

Oracle Cloud Infrastructure Secret Management
Free planWebAPI7.0Free plan - 2
Haltdos
Free planWebAPILinuxSelf-hosted6.8From $30 a month - 3
FastNetMon
WebAPILinuxmacOS6.7From $115 a month - 4

Gcore DDoS Protection
Free planWebAPI6.7Free plan - 5

AWS Shield
Free planWebAPI6.5From $3,000 a month - 6

Imperva API Security
WebAPISelf-hosted6.5
