---
title: Exclude a prefix · Cloudflare DDoS Protection docs
description: To exclude a prefix or a prefix subset from Advanced DDoS Protection:
lastUpdated: 2024-11-04T15:20:19.000Z
source_url:
  html: https://hyperlint-automation-repository-scan-0098fc0.preview.developers.cloudflare.com/ddos-protection/advanced-ddos-systems/how-to/exclude-prefix/index.md
  md: https://hyperlint-automation-repository-scan-0098fc0.preview.developers.cloudflare.com/ddos-protection/advanced-ddos-systems/how-to/exclude-prefix/
---

To exclude a prefix or a prefix subset from Advanced DDoS Protection:

1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com) and select your account.
2. Go to **L3/4 DDoS** > **Advanced Protection**.
3. [Add the prefix](https://developers.cloudflare.com/ddos-protection/advanced-ddos-systems/how-to/add-prefix/) you previously onboarded to Magic Transit to Advanced TCP Protection.
4. [Add the prefix](https://developers.cloudflare.com/ddos-protection/advanced-ddos-systems/how-to/add-prefix/) (or subset) you wish to exclude as a new, separate prefix in Advanced TCP Protection.
5. For the prefix you added in the previous step, select **Exclude Subset** in the **Enrolled Prefixes** list.

Note

Prefixes or subsets added as *Excluded* will not be protected by Advanced TCP Protection.
