How Magic Transit works
With Magic Transit, Cloudflare advertises your IP prefixes to the internet. Traffic destined for your network reaches Cloudflare first, where attacks are filtered. Clean traffic is then forwarded to your network.
The return path
By default, clean traffic often travels to your network through tunnels over the internet. That works, but performance depends on internet conditions.
A private interconnect
Cloudflare Network Interconnect provides a private path for that clean traffic. Delivered via Peer1IX, it reaches your network over the fabric.
Benefits
- More predictable latency and throughput.
- Less dependence on public internet paths during large attacks.
- Simpler capacity planning.
Layered protection
Combine Magic Transit with on-network controls and Peer1IX DDoS Protection for defence in depth.
