Network Firewall

Cloudflare Network Firewall

Cloudflare Network Firewall is a firewall-as-a-service (FWaaS) offering for on-premises networks and WANs. No more bottlenecks — instead of backhauling traffic through firewall appliances, filter layer 3 and 4 traffic with the Cloudflare network, which has locations in over 330 cities throughout the world. This allows for secure and efficient network traffic management.

Secure entire WAN

Enforce network security policies across your entire WAN, including headquarters, branch offices, and virtual private clouds. Cloudflare Network Firewall ensures that all network traffic is inspected and filtered according to your security policies.

No appliances to manage

The Cloudflare Network Firewall is delivered from the Cloudflare global network, eliminating the need to manage hardware appliances. This approach removes artificial choke points and downtime for appliance upgrades, providing a more efficient and scalable security solution.

Deploy rules instantly

Fine-grained filtering rules can be deployed globally in seconds. Manage rules from a single dashboard, allowing for rapid response to changing security needs and ensuring that your network is always protected.

Apply filtering policies on the Cloudflare global network

Cloudflare Network Firewall runs everywhere in Cloudflare’s global network, letting you inspect layer 3 / 4 traffic no matter where your branch offices are located.

Apply filtering policies on the Cloudflare global network

Cloudflare Network Firewall runs everywhere in Cloudflare’s global network, letting you inspect layer 3 / 4 traffic no matter where your branch offices are located.

Consult with an expert

Retire legacy firewall appliances

Network Firewall is deployed from the cloud, blocking attacks with no need to install or maintain hardware boxes. This allows organizations to retire legacy firewall appliances and reduce the complexity of their network security infrastructure.

Mitigate L3 DDoS attacks

Network Firewall integrates Magic Transit to stop layer 3 DDoS attacks that can overwhelm your infrastructure. This provides comprehensive protection against DDoS attacks and ensures that your network remains available and secure.

Get started with Cloudflare Network Firewall

Explore tutorials and developer documentation to learn how to apply Network Firewall for your cloud infrastructure and network offices.

https://developers.cloudflare.com/magic-firewall/

Solution brief

Developer documentation

Shopify

"

For Shopify, the real challenge is not about how many different pieces of complex technology we can use but the opposite. Cloudflare helps us find a simple way to achieve something very complex that we can scale and maintain. "

Duncan Davidson VP of Developer Productivity

Compute

Workers

Global serverless functions

Containers

Any language, anywhere

Sandboxes

Secure code execution

Durable Objects

Stateful compute

Browser Rendering

Automated browsers

Workflows

Process orchestration

Storage

Egress-free storage

Data Platform

Ingest, Catalog & Query

Hyperdrive

Global databases

Serverless SQL

Key-value speed

Queues

Message processing

Artifacts

Git-native versioned storage

Workers AI

Edge AI models

Agents

Build stateful AI agents

AI Gateway

AI observability

Vectorize

Vector database

AI Search

Instant retrieval

Media

Images

Image optimization

Stream

Video streaming

RealtimeKit

Live comms

TURN / SFU

Real-time infra

Network

DNS

Fast DNS

CDN

Faster delivery

WAF

App protection

Load Balancing

Zero downtime

Rate Limiting

Abuse prevention

Bot Mitigation

Block bots

Turnstile

Privacy-first bot checks

DDoS Protection

DDoS mitigation

SASE / Zero Trust

SASE

Unified zero trust platform

Build without boundaries

Join thousands of developers who've eliminated infrastructure complexity and deployed globally with Cloudflare. Start building for free — no credit card required.

Start building for free

View docs