---
source_url: "https://developers.cloudflare.com/ddos-protection/managed-rulesets/?utm_source=openai"
title: Managed rulesets · Cloudflare DDoS Protection docs
mirrored_at: 2026-08-04T13:09:20.049Z
host: developers.cloudflare.com
cited_in_42a: true
mirror_canonical: "https://index.42a.ai/developers.cloudflare.com/ddos-protection/managed-rulesets/index__q__utm_source_openai"
---

> **Original source:** https://developers.cloudflare.com/ddos-protection/managed-rulesets/?utm_source=openai

1.  [Home](https://developers.cloudflare.com/)
2.  /[DDoS Protection](https://developers.cloudflare.com/ddos-protection/)
3.  /Managed rulesets

The DDoS Attack Protection managed rulesets provide comprehensive protection against a [variety of DDoS attacks](https://developers.cloudflare.com/ddos-protection/about/attack-coverage/) across L3/4 (network layer) and L7 (application layer) of the [OSI model ↗](https://www.cloudflare.com/learning/ddos/glossary/open-systems-interconnection-model-osi/).

The available managed rulesets are:

-   **[HTTP DDoS Attack Protection](https://developers.cloudflare.com/ddos-protection/managed-rulesets/http/)**
    
    -   This ruleset includes rules to detect and mitigate DDoS attacks over HTTP and HTTPS.
-   **[Network-layer DDoS Attack Protection](https://developers.cloudflare.com/ddos-protection/managed-rulesets/network/)**
    
    -   This ruleset includes rules to detect and mitigate DDoS attacks on L3/4 of the OSI model such as UDP floods, SYN-ACK reflection attacks, SYN Floods, and DNS floods.

* * *

When Cloudflare creates a new managed rule, we check the rule impact against the traffic of Business and Enterprise zones while the rule is not blocking traffic yet.

If a [false positive](https://developers.cloudflare.com/ddos-protection/managed-rulesets/http/http-overrides/override-examples/#legitimate-traffic-is-incorrectly-identified-as-an-attack-and-causes-a-false-positive) is detected, we proactively reach out to the affected customers and help them make configuration changes (for example, to lower the sensitivity level of the new rule) before the rule starts mitigating traffic. This prevents the new rule from causing service disruptions and outages to your Internet properties.

[PreviousAttack coverage](https://developers.cloudflare.com/ddos-protection/about/attack-coverage/)[NextOverview](https://developers.cloudflare.com/ddos-protection/managed-rulesets/http/)