From 81990a3a7320f45269312796950584df28c37631 Mon Sep 17 00:00:00 2001 From: Denise Pena Date: Tue, 17 Aug 2021 16:24:26 -0500 Subject: [PATCH 1/3] Added content for Flow Based Monitoring --- .../content/about/flow-based-monitoring.md | 24 +++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 products/magic-transit/src/content/about/flow-based-monitoring.md diff --git a/products/magic-transit/src/content/about/flow-based-monitoring.md b/products/magic-transit/src/content/about/flow-based-monitoring.md new file mode 100644 index 00000000000..48698cfe42d --- /dev/null +++ b/products/magic-transit/src/content/about/flow-based-monitoring.md @@ -0,0 +1,24 @@ +--- +title: Flow-based monitoring +order: +pcx-content-type: how to +--- + +# Flow-based monitoring + +Flow-based monitoring works with [on demand](/on-demand) to detect and notify you about attacks based on traffic flows from your data centers. You can configure your routers to continuously send NetFlow data to Cloudflare where the flow data is ingested and analyzed for volumetric DDoS attacks. When an attack is detected, Cloudflare automatically notifies you by email, webhook, or [PagerDuty](https://support.cloudflare.com/hc/en-us/articles/360047358211-Connecting-PagerDuty-to-Cloudflare) with information about the attack. + +You can choose to activate IP advertisement via the Cloudflare dashboard, API, or automatically. After Magic Transit is activated and your traffic is flowing through Cloudflare, you only receive the clean traffic back to your network over your GRE tunnels. + +To activate IP advertisement via the Cloudflare dashboard, refer to [​using the IP Prefixes page to configure dynamic advertisement](https://developers.cloudflare.com/byoip/dynamic-advertisement/configure-dynamic-advertisement#use-the-ip-prefixes-page-to-configure-dynamic-advertisement). + +To activate IP advertisement via the API, refer to the [IP Address Management Dynamic Advertisement API](https://api.cloudflare.com/#ip-address-management-dynamic-advertisement-properties). + +## Enable Flow-based monitoring alerts + +1. Log in to your Cloudflare dashboard and select **Notifications**. +1. From **Notifications**, click **Add**. +1. Locate **Magic Transit** in the list and click **Select** to add a Flow-based Monitoring: Volumetric Attack notification. +1. Enter a name and description for the notification. +1. Add an email address for the person who should receive the notification. +1. Click **Create** when you are done. \ No newline at end of file From f29cea9d95c039b01830cb2da8c6654e1355c7a0 Mon Sep 17 00:00:00 2001 From: Denise Pena Date: Wed, 18 Aug 2021 10:17:46 -0500 Subject: [PATCH 2/3] Implemented feedback --- .../src/content/about/flow-based-monitoring.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/products/magic-transit/src/content/about/flow-based-monitoring.md b/products/magic-transit/src/content/about/flow-based-monitoring.md index 48698cfe42d..5d0d142ff12 100644 --- a/products/magic-transit/src/content/about/flow-based-monitoring.md +++ b/products/magic-transit/src/content/about/flow-based-monitoring.md @@ -1,12 +1,12 @@ --- title: Flow-based monitoring order: -pcx-content-type: how to +pcx-content-type: how-to --- # Flow-based monitoring -Flow-based monitoring works with [on demand](/on-demand) to detect and notify you about attacks based on traffic flows from your data centers. You can configure your routers to continuously send NetFlow data to Cloudflare where the flow data is ingested and analyzed for volumetric DDoS attacks. When an attack is detected, Cloudflare automatically notifies you by email, webhook, or [PagerDuty](https://support.cloudflare.com/hc/en-us/articles/360047358211-Connecting-PagerDuty-to-Cloudflare) with information about the attack. +Flow-based monitoring works with [Magic Transit on demand](/on-demand) to detect and notify you about attacks based on traffic flows from your data centers. You can configure your routers to continuously send NetFlow data to Cloudflare where the flow data is ingested and analyzed for volumetric DDoS attacks. When an attack is detected, Cloudflare automatically notifies you by email, webhook, or [PagerDuty](https://support.cloudflare.com/hc/en-us/articles/360047358211-Connecting-PagerDuty-to-Cloudflare) with information about the attack. You can choose to activate IP advertisement via the Cloudflare dashboard, API, or automatically. After Magic Transit is activated and your traffic is flowing through Cloudflare, you only receive the clean traffic back to your network over your GRE tunnels. @@ -16,7 +16,7 @@ To activate IP advertisement via the API, refer to the [IP Address Management Dy ## Enable Flow-based monitoring alerts -1. Log in to your Cloudflare dashboard and select **Notifications**. +1. Log in to your [Cloudflare dashboard](https://dash.cloudflare.com/login) and select **Notifications**. 1. From **Notifications**, click **Add**. 1. Locate **Magic Transit** in the list and click **Select** to add a Flow-based Monitoring: Volumetric Attack notification. 1. Enter a name and description for the notification. From d28711fcce9e25e48779dda5aab0626879fa0008 Mon Sep 17 00:00:00 2001 From: Denise Pena Date: Thu, 19 Aug 2021 16:42:40 -0500 Subject: [PATCH 3/3] Implemented Nick's feedback --- .../src/content/about/flow-based-monitoring.md | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/products/magic-transit/src/content/about/flow-based-monitoring.md b/products/magic-transit/src/content/about/flow-based-monitoring.md index 5d0d142ff12..56a959b80cc 100644 --- a/products/magic-transit/src/content/about/flow-based-monitoring.md +++ b/products/magic-transit/src/content/about/flow-based-monitoring.md @@ -6,9 +6,9 @@ pcx-content-type: how-to # Flow-based monitoring -Flow-based monitoring works with [Magic Transit on demand](/on-demand) to detect and notify you about attacks based on traffic flows from your data centers. You can configure your routers to continuously send NetFlow data to Cloudflare where the flow data is ingested and analyzed for volumetric DDoS attacks. When an attack is detected, Cloudflare automatically notifies you by email, webhook, or [PagerDuty](https://support.cloudflare.com/hc/en-us/articles/360047358211-Connecting-PagerDuty-to-Cloudflare) with information about the attack. +Flow-based monitoring works with [Magic Transit on demand](/on-demand) to detect and notify you about attacks based on traffic flows from your data centers. You can configure your routers to continuously send NetFlow data to Cloudflare where the flow data is ingested and analyzed for volumetric DDoS attacks. When an attack is detected, Cloudflare automatically notifies you by email, [webhook](https://developers.cloudflare.com/fundamentals/notifications/configure-create/create-notifications#webhooks-to-external-services), or [PagerDuty](https://developers.cloudflare.com/fundamentals/notifications/configure-create/create-notifications#pagerduty) with information about the attack. -You can choose to activate IP advertisement via the Cloudflare dashboard, API, or automatically. After Magic Transit is activated and your traffic is flowing through Cloudflare, you only receive the clean traffic back to your network over your GRE tunnels. +You can choose to activate IP advertisement via the Cloudflare dashboard or API.. After Magic Transit is activated and your traffic is flowing through Cloudflare, you only receive the clean traffic back to your network over your GRE tunnels. To activate IP advertisement via the Cloudflare dashboard, refer to [​using the IP Prefixes page to configure dynamic advertisement](https://developers.cloudflare.com/byoip/dynamic-advertisement/configure-dynamic-advertisement#use-the-ip-prefixes-page-to-configure-dynamic-advertisement). @@ -21,4 +21,6 @@ To activate IP advertisement via the API, refer to the [IP Address Management Dy 1. Locate **Magic Transit** in the list and click **Select** to add a Flow-based Monitoring: Volumetric Attack notification. 1. Enter a name and description for the notification. 1. Add an email address for the person who should receive the notification. -1. Click **Create** when you are done. \ No newline at end of file +1. Click **Create** when you are done. + +For more information on receiving notifications via PagerDuty or using webhooks, refer to [create a notification](https://developers.cloudflare.com/fundamentals/notifications/configure-create/create-notifications). \ No newline at end of file