← Back to context

Comment by threecheese

5 hours ago

As far as I know they terminate all TLS; it’s one of the tradeoffs using them.

They have a product called Magic Transit that offers DDoS protection and such for plain IP traffic, where Cloudflare does not terminate TLS. Pricing is not public but starts in the five-digit USD per month range according to people I talk to.

This may tell you something about how keen Cloudflare are to handle traffic they themselves cannot decrypt.

  • Magic Transit uses BGP magic to work. That only makes sense at scale - i believe you have to have your own ASN for it to work.

    Realistically its a totally different product, and 5 digit price is probably cheap relative to competitors in that space.