One more (Zero Trust) thing: Cloudflare Intrusion Detection System

On October 17th, 2020, Cloudflare announced its plans for a new product called Cloudflare Intrusion Detection System (IDS). This system monitors networks and alerts users when an attack is suspected. It integrates deeply with Cloudflare One, providing a comprehensive view of the entire global network and inspecting all traffic for malicious behavior. The IDS analyzes the network simultaneously and alerts users to events that may have been missed by static rules. This system complements Cloudflare's Magic Firewall and offers a single view of what is happening within the network, helping identify breaches. It also improves over time with intelligence gathered from attacks in other regions or industries. The IDS operates through traffic shaping and inspection, learning normal behavior patterns to detect anomalies. It benefits from herd immunity by learning from attacks against Cloudflare and its customers' networks. Users can offload the CPU-intensive work of running an IDS to Cloudflare's network, which is built for scalability. Deployment is simple, requiring only one click, and users receive alerts with insights into the type of attack and where it occurred. The system allows remediation through a single rule push to the global Cloudflare network.