zoom_in Click to enlarge

Cloudflare Spectrum

▲ ▼

language

description Cloudflare Spectrum Overview

Spectrum extends Cloudflare's capabilities beyond just DNS resolution by allowing users to proxy *any* TCP/UDP traffic through their network edge. While not strictly a DNS manager, it is a critical companion tool for advanced DNS management, enabling Layer 4 traffic routing based on DNS decisions. It is best for organizations needing to secure and route non-HTTP/S traffic (like gaming or custom protocols).

help Cloudflare Spectrum FAQ

Does Cloudflare Spectrum proxy non-HTTP services?

Yes. Spectrum can proxy TCP or UDP applications such as game servers, MQTT, SSH, email, and file-transfer services through Cloudflare's edge.

Is Cloudflare Spectrum included with ordinary Cloudflare DNS?

No. Authoritative DNS and Spectrum are separate services, and broad custom TCP or UDP support requires an eligible paid or Enterprise arrangement.

Does Spectrum hide the origin server's IP address?

It can expose Cloudflare's edge address to clients instead of the origin, helping protect the origin from direct Layer 3 and Layer 4 attacks. The origin still needs firewall rules that prevent attackers from bypassing Cloudflare through a previously discovered address.

How does Cloudflare Spectrum preserve a connecting user's IP address?

Spectrum can send the client address to a compatible origin using the PROXY protocol. The destination service must be configured to understand that protocol, or it may log Cloudflare addresses instead.

swap_horiz

Looking for Cloudflare Spectrum alternatives? Compare top competitors ranked & scored

arrow_forward