README

Cloudflare Spectrum provides security and acceleration for ANY TCP or UDP-based application. It’s a global Layer 4 (L4) reverse proxy running on Cloudflare’s edge nodes that routes MQTT, email, file transfer, version control, games, and more through Cloudflare to mask origins and protect from DDoS attacks.

When to Use Spectrum: When your protocol isn’t HTTP/HTTPS (use Cloudflare proxy for HTTP). Spectrum handles everything else: SSH, gaming, databases, MQTT, SMTP, RDP, custom protocols.

Plan Capabilities

Decision Tree

What are you trying to do?

1. Create/manage Spectrum app

   • Via Dashboard → See Cloudflare Dashboard (opens in a new tab)
   • Via API → See api.md - REST endpoints
   • Via SDK → See api.md - TypeScript/Python/Go examples
   • Via IaC → See configuration.md - Terraform/Pulumi

2. Protect specific protocol

   • SSH → See patterns.md
   • Gaming (Minecraft, etc) → See patterns.md
   • MQTT/IoT → See patterns.md
   • SMTP/Email → See patterns.md
   • Database → See patterns.md
   • RDP → See patterns.md

3. Choose origin type

   • Direct IP (single server) → See configuration.md
   • CNAME (hostname) → See configuration.md
   • Load balancer (HA/failover) → See configuration.md

Reading Order

1. Start with patterns.md for your specific protocol
2. Then configuration.md for your origin type
3. Check gotchas.md before going to production
4. Use api.md for programmatic access

See Also

• Cloudflare Docs (opens in a new tab)