Protecting public websites and APIs
L3/L4/L7 DDoS protection without caps, a WAF with managed rules, Bot Management and API Shield with positive security.
CDN · DDoS · WAF · Zero Trust · Workers
One edge network handles
everything between your users and your apps.
Cloudflare calls itself a “connectivity cloud”. Its Anycast network covers 320+ cities, and every location runs CDN, DDoS filtering, WAF, Bot Management, Zero Trust and edge compute at the same time. You get one contract, one console and one network for web applications, remote employees and corporate networks.
20 %
of all web traffic on the internet passes through Cloudflare every day.
71M
requests per second at the peak of a DDoS attack that Cloudflare stopped (a record HTTP attack in 2023).
~30 ms
typical RTT to an edge node from Tashkent and Samarkand.
SOC 2 II
ISO 27001, ISO 27018, PCI DSS, FedRAMP Moderate.
Global Anycast network
One IP address in 320+ cities.
Cloudflare announces the same IP prefix over BGP from every point of presence at once. Users automatically reach the nearest data center, which runs the full security and delivery stack.
WHAT CHANGES AFTER YOU CONNECT
Direct connection
Through Cloudflare
Latency to the user
Without:150-300 ms, because traffic travels to a single data center
Cloudflare:~30 ms, because the nearest node responds (Tashkent, Almaty, Moscow)
DDoS attacks
Without:the link and the server are overloaded and the site goes down
Cloudflare:the attack is absorbed at the edge (388 Tbps capacity) and the site keeps working
Traffic spikes and load
Without:the origin can’t handle peaks, so you need extra servers and bandwidth
Cloudflare:the cache and the edge absorb the spike, so the origin has less load and you save bandwidth
TLS certificates and HTTP/3
Without:manual installation and renewal, with a risk of expiry
Cloudflare:free automatic TLS and HTTP/3 out of the box
WAF and bots
Without:no L7 filtering, so vulnerabilities are exposed and bots get through
Cloudflare:WAF, Bot Management and rate limiting at the entry point
Resilience
Without:one region is a single point of failure
Cloudflare:Anycast in 330+ cities with automatic failover
A typical self-hosted website compared with the same site behind Cloudflare. Latency values are approximate, for Central Asia.
388 Tbps
total capacity of the Anycast network, 25× larger than the biggest DDoS attack in history.
95 %
of the world’s internet users are within 50 ms of a Cloudflare point of presence.
120+
countries with a physical presence. Local peering with operators in Uzbekistan.
Cloudflare One · Zero Trust
Replace VPN, web filtering and CASB with one stack.
Cloudflare One is a complete SASE platform: ZTNA, SWG, CASB, RBI, DLP and Email Security. You can add modules one at a time and deploy them in days, not months.
Access · ZTNA
A VPN replacement. Authentication at the application level, device posture checks and context-based policies (geo, time, identity).
SAML · OIDC · WireGuard · cloudflared tunnel
Gateway · SWG
Secure Web Gateway: DNS filtering, HTTPS inspection, anti-malware, file and application control.
DNS · HTTP · L4 · Network
CASB
Inventory and control of SaaS applications: Microsoft 365, Google Workspace, Salesforce, Slack, GitHub.
API-based · 30+ SaaS
Browser Isolation
Remote Browser Isolation: the page is rendered in the cloud and the user sees an “image”, so malware never reaches the endpoint.
RBI · clientless
Email Security (Area 1)
Email protection before delivery: anti-phishing, BEC, supply chain compromise. Works as the MX in front of Microsoft 365 / Google.
M365 · Google Workspace
DLP
Finds and blocks personal data, card data, medical records and custom patterns in traffic and SaaS.
Inline · API · OCR
Magic family · network services
Protection and delivery at the IP level, beyond the web.
Magic services are for organizations that work with direct IP routing, operator segments and large SD-WAN projects.
L3 · Always-on
Magic Transit
BGP anycast DDoS protection for entire /24 prefixes. Cloudflare becomes your network’s “pipe” and delivers clean traffic to the data center over GRE/IPsec.
- L3/L4 attack protection with 388 Tbps capacity
- BGP tunnels + the Anycast network
- Mitigation SLA: < 3 seconds
SD-WAN · WAN-as-a-Service
Magic WAN
A replacement for MPLS and hub-and-spoke VPN. Offices and clouds connect to the Cloudflare network through tunnels, and routing and policies live in the cloud.
- IPsec / GRE / Cloudflare Network Interconnect
- The Cloudflare backbone between offices
- One set of Magic Firewall policies
L3/L4 · Cloud Firewall
Magic Firewall
A cloud network firewall at the edge: IP/port/protocol rules for all traffic that passes through Magic Transit or Magic WAN.
- Stateful L3/L4 policies
- Auto-blocking based on threat intelligence
- Logs to SIEM (Splunk, Sentinel)
Workers · edge compute
Run code in 320 cities at once, with a single command.
Cloudflare Workers are V8 isolate functions at the edge. They start in 0 ms (no “cold start”), you pay for actual CPU time, and they deploy to 320+ cities at once.
- A/B testing and custom rules - without calling the origin.
- Edge API and proxying - caching and transforming requests.
- Bot challenge / Turnstile - custom verification without CAPTCHA.
- R2 (object storage) and D1 (SQLite on the edge) keep state without round trips to HQ.
- 0 ms start - V8 isolates, not containers.
export default {
async fetch(request, env) {
// Geo-aware routing: drop traffic that is known to be malicious
const country = request.cf.country;
const bot = request.cf.botManagement.score;
if (bot < 30) {
return new Response('blocked', { status: 403 });
}
// Swap the backend for specific regions
const origin = country === 'UZ'
? 'https://uz-edge.cyberboost.uz'
: 'https://global.cyberboost.uz';
return fetch(origin + new URL(request.url).pathname);
},
};
Deployed to 320 cities · 47 ms
Use cases
What we use Cloudflare for in Uzbekistan.
Remote work without a VPN
Access (ZTNA) + Gateway (SWG) for distributed teams. No VPN concentrator and no ports exposed to the outside.
Protecting M365 / Google Workspace
Email Security catches BEC and phishing before delivery, and CASB controls access and DLP in SaaS applications.
Multi-branch SD-WAN
Magic WAN replaces MPLS: offices connect over IPsec/GRE and routing goes through the Cloudflare network.
Edge logic and a custom WAF
With Workers you can write custom security rules: rate limiting based on business logic, geo-blocking, custom caching.
Operator networks
Magic Transit protects entire IP prefixes from DDoS, especially for government and financial data centers.
CYBER BOOST × Cloudflare
Contract, payment and deployment in Uzbekistan.
We supply Cloudflare to businesses in Uzbekistan. We sign contracts in soums or US dollars, help migrate your DNS, design your Zero Trust setup, write WAF and Workers rules and connect Magic Transit.
7 days
typical time to migrate DNS, WAF and DDoS protection to Cloudflare.
UZS / USD
contracts in both currencies and preferential rates for the public sector.
RU/UZ
local engineers certified in Cloudflare One, Workers and Magic.
L1–L3
first-line support in Tashkent, with escalation to the Cloudflare TAM.
FAQ
Frequently asked questions about Cloudflare.
How is Cloudflare different from an ordinary CDN?
A classic CDN caches content. Cloudflare is built on one Anycast network in 320+ cities. Every location runs CDN, DDoS filtering, WAF, Bot Management, edge compute (Workers) and Zero Trust functions at the same time. Cloudflare calls this a “connectivity cloud”.
What is Cloudflare One?
Cloudflare One is a Zero Trust platform with Access (ZTNA instead of VPN), Gateway (an SWG for DNS and HTTPS filtering), CASB (SaaS control), Browser Isolation (RBI), DLP and Email Security. All the products share one network and one management console.
Is Cloudflare DDoS protection suitable for a large provider?
Yes. Magic Transit routes your IP prefixes through the Cloudflare network (BGP anycast), and all filtering happens in Cloudflare’s 388 Tbps “pipe”. In practice, Cloudflare has publicly mitigated attacks of 71 million requests per second and DDoS attacks of 2+ Tbps without adding latency for legitimate traffic.
Can Cloudflare replace SD-WAN?
Yes, with Magic WAN. You connect offices through IPsec/GRE tunnels or Cloudflare Network Interconnect, set policies in Magic Firewall, and Cloudflare routes the traffic through its network. With the right topology it replaces MPLS and hub-and-spoke VPN.
What are Workers, and why run code at the edge?
Workers are V8 isolate functions at the edge: your code runs in 320+ Cloudflare data centers “milliseconds away from the user”. They are used for A/B testing, custom security rules, edge APIs, proxying and request optimization without calling the origin server.
Where is customer data stored?
Cloudflare has data residency agreements for the EU, US, India, Japan and Australia. By default, traffic data is processed at the nearest edge without being stored, and logs can be sent to any region. Cloudflare complies with GDPR, SOC 2 Type II and ISO 27001/27018.
Request · Cloudflare
A demo and a pilot, with no obligation.
Tell us what you need: website protection, VPN replacement, SD-WAN or edge logic. We will put together a pilot plan for your applications and send you the configuration within one business day.
EMAIL
info@cyberboost.uz
PHONE
+998 90 925 41 68