Cloudflare Spectrum
- Free allowance
- Custom TCP/UDP applications require an Enterprise plan with Spectrum as a paid add-on.
- Verdict
- paidno free allowance; listed for its price
- Cost
- no price statedsee Price below
- Identity
- institutionno card, no phone
- Binding limit
- write-gatedcustom TCP/UDP needs an Enterprise plan with Spectrum as a paid add-on
- Evidence
- documented2 sources; a first-party page was read and the sentence quoted
- Freshness
- stale on 2026-11-23checked 2026-10-23 (live); stale on 2026-11-23
| Free tier | Custom TCP/UDP applications require an Enterprise plan with Spectrum as a paid add-on. unit none; metered on none |
|---|---|
| Price | unpublished (Enterprise contract) |
| Limits |
|
| Binding | write-gated No byte count fails at 1 TiB/month; the Enterprise contract is the gate. The only sub-Enterprise route is a Pro or Business plan, where Spectrum is limited to a single Minecraft app (UDP for Bedrock) and a single SSH app. |
| Identity | institution An Enterprise contract with Cloudflare sales, plus a domain on Cloudflare. The Pro and Business plans carry Spectrum only for 'Minecraft (one app allowed)' and 'SSH (one app allowed)'. |
| Egress | No byte allowance is published. The plan table gives 'TCP' and 'UDP' as 'Paid add-on' on Enterprise and 'No' on Free, Pro and Business; Enterprise Spectrum is metered per GB at an unpublished rate.; ingress: tcp+udp free allowance: none published |
| Interface | rest, cli configured through the Cloudflare dashboard or the API; Spectrum applications are created per protocol and port |
| Tooling | Cloudflare dashboard or API; no client-side daemon |
| Composes with | composes with any free VM as the origin: the VM keeps its own address private and the anycast address is the published one, which is what a WireGuard or game endpoint needs. |
| Reliability | none recorded |
| Notes | The benchmark. Cloudflare Magic Transit is the adjacent product and is not a substitute: it takes a /24 and BGP or GRE from the customer, where Spectrum takes an origin IP and a port. Two things stay open: the Enterprise per-GB rate, and whether the Pro-tier Minecraft slot is usable for a Bedrock (UDP) server rather than only Java (TCP) - the table names the game, not the protocol. |
| Evidence note | documented The support matrix and the Enterprise requirement are on the pages read. The per-GB rate and the Pro add-on price are not published, so the cost side stays unverified. |
Evidence 2
| date | source | what it proved |
|---|---|---|
| 2026-10-23 | developers.cloudflare.com/spectrum/ | Spectrum provides security and acceleration for any TCP or UDP based application, and custom TCP/UDP applications require an Enterprise plan with Spectrum as a paid add-on |
| 2026-10-23 | developers.cloudflare.com/spectrum/protocols-per-plan/ | Availability: No on Free, Paid add-on on Enterprise; TCP and UDP are No on Pro and Business; Minecraft (one app allowed) and SSH (one app allowed) are Yes on Pro and Business |
More fields 7
{
"wg_path": "inside-udp",
"wg_detail": "Spectrum forwards arbitrary UDP to an origin port, so a WireGuard listener on the origin is reachable through the anycast address; no .conf is issued.",
"ingress": "tcp+udp",
"volume_tib_month": null,
"volume_stated": "No byte allowance is published. The plan table gives 'TCP' and 'UDP' as 'Paid add-on' on Enterprise and 'No' on Free, Pro and Business; Enterprise Spectrum is metered per GB at an unpublished rate.",
"bytes_transit": "yes",
"transit_note": "Cloudflare carries the bytes between its edge and the origin"
}Unknown values 2
$.per_object_cap.statedthe field does not apply to this kind of offer$.retention.statedthe field does not apply to this kind of offer