Try our new research platform with insights from 80,000+ expert users

AWS Shield vs F5 BIG-IP Advanced Firewall Manager (AFM) comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 5, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Ranking in Distributed Denial-of-Service (DDoS) Protection
1st
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
77
Ranking in other categories
CDN (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (12th)
AWS Shield
Ranking in Distributed Denial-of-Service (DDoS) Protection
8th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
11
Ranking in other categories
No ranking in other categories
F5 BIG-IP Advanced Firewall...
Ranking in Distributed Denial-of-Service (DDoS) Protection
9th
Average Rating
8.4
Reviews Sentiment
7.0
Number of Reviews
25
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of October 2025, in the Distributed Denial-of-Service (DDoS) Protection category, the mindshare of Cloudflare is 18.8%, up from 17.4% compared to the previous year. The mindshare of AWS Shield is 5.3%, down from 6.8% compared to the previous year. The mindshare of F5 BIG-IP Advanced Firewall Manager (AFM) is 1.2%, down from 1.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Distributed Denial-of-Service (DDoS) Protection Market Share Distribution
ProductMarket Share (%)
Cloudflare18.8%
AWS Shield5.3%
F5 BIG-IP Advanced Firewall Manager (AFM)1.2%
Other74.7%
Distributed Denial-of-Service (DDoS) Protection
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Ifeanyi Stanly Nwokoro - PeerSpot reviewer
Has ensured ongoing protection against cyber threats and provides timely automated response while requiring improvements in cost structure and performance transparency
Business inherently involves risk, and it's important that services continue to improve. AWS Shield is not an exception. Regarding advanced Shield protection pricing, there should be cost protection for most DDoS events. The pricing model should be based on service usage rather than a flat monthly rate. The advanced technique package, while premium and not available to every user due to cost implications of $3,000 per month, offers valuable features including real-time attack visibility and 24/7 access to the DDoS response team. Integration is paramount, particularly with the Web Application Firewall's rule-based blocking paradigm that helps in balancing routes, especially route 53 and the global accelerator. AWS Shield uses pattern recognition to analyze traffic, and certain attributes are immediately intercepted. The assessment process is profound, and the service maintains consistent availability. From a software perspective, there are improvements needed regarding antivirus and network security. Additional engineering improvement requirements would benefit AWS Shield.
Pawel Augustyn - PeerSpot reviewer
Provides outstanding resource management and application security across multiple geographies
The most valuable features for me are stability, availability, and security, along with the ability to manage multiple features to secure my applications. The solution also monitors and blocks unconventional requests and maintains security efficiently. The scalability feature also allows me to manage and allocate resources dynamically without disrupting production traffic.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It's very user-friendly."
"The UI is good."
"The most valuable feature is the web application firewall."
"The most valuable feature of Cloudflare is that it has a free version. They give us the free version with the anti-DDoS features and also the load balancing solution."
"The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules."
"The solution automatically detects and responds to certain types of traffic based on geolocation."
"The most valuable feature of Cloudflare DNS is its global reach and it is always evolving."
"The web application firewall brought us good security and a view of the accesses/blocks of the entire domain and subdomain that were accessed both by region (country) and IPs."
"AWS Shield is aligned with the web application firewall (WAF), and they work seamlessly together, primarily working with Elastic Load Balancer, CloudFront, and Route 53 for CDN and DNS services protection."
"It is integrated with AWS. So, it gives you a good first step."
"The product has a good mechanism to analyze trends and trigger events."
"I recommend AWS Shield because it has proven helpful in tracking DDoS attacks within both my past and present environments, and without AWS Shield, a business could face potential losses, as this tool helps in identifying and mitigating fake traffic that disrupts applications, ultimately supporting business continuity."
"The automatic detection and mitigation of DDoS attacks in the product operates in real-time and provides satisfactory results."
"I am impressed with the product's multiple features like security."
"The solution operates smoothly at its baseline level, and we do not encounter any issues at that level."
"We have integrated the tool with Active Directory. The most important feature is that it's transparent and doesn't degrade the performance of our solution. Additionally, it's easy to configure, which is crucial for us. It's easy to use and set up and stops attacks on our servers. We haven't encountered any attack problems because the solution stops them in real-time. AWS Shield specifically focuses on defending against denial-of-service attacks, making it a great solution for that type of threat."
"The protection is very useful."
"F5 BIG-IP Advanced Firewall Manager's most valuable feature is load balance. It is readily available and uncomplicated."
"The product helps us provide security validation by protecting various applications from getting hacked."
"The solution is very straightforward. The usability is great."
"The decryption is great."
"Its performance and ease of use are valuable."
"The most valuable feature of this solution is that the blocking of IP's."
"It excels in preventing downtime and maintaining application performance, which is crucial for our clients' security and operational continuity."
 

Cons

"Cloudflare's console should be made more user-friendly."
"The solution could be more user-friendly."
"In the last two years, there has been a certain amount of downtime when using the VDM."
"There might be helpful if there was some web application firewall feature."
"Cloudflare could offer a better view or maybe dashboards of the main resources used in the client."
"The solution could work at being less expensive. It costs a lot to use it."
"There could be more courses with engineers. I like e-learning, however, having a specialist in a classroom is more comfortable for me."
"The integration of LLMs on the dashboard is something that is needed in the tool."
"We end up having to pay extra for features that AWS adds that we don't need."
"The product is expensive."
"The product should give users more flexibility to customize their security policies according to their requirements."
"The product needs to improve its logs and reports to make it read better."
"The time taken to detect anomalies must be reduced."
"Perhaps the time required to detect anomalies can be reduced."
"Perhaps the time required to detect anomalies can be reduced. Presently, it takes some time to determine whether a situation is normal or abnormal."
"The network has been experiencing frustrating performance issues today, which is not typical for Nigeria."
"There should be simplified and better integration with BIG-IQ."
"The solution doesn't really meet our requirements for an edge firewall."
"Some spam can go by the firewall."
"The web gateway feature could improve in F5 BIG-IP Advanced Firewall Manager (AFM)."
"We would have preferred to have support when we first started"
"This would be absolutely the best network security solution if the price were not so high."
"The solution’s initial setup is not easy."
"Deployment times vary according to the customer. It needs to be heavily configured. You need to look and you need to observe the behavior of the traffic before you can start configuring everything. It can take time."
 

Pricing and Cost Advice

"We are using the free tier of the solution."
"There are no additional costs beyond the standard licensing fees."
"When you compare Cloudflare DNS to other solutions, such as Akamai, the price is reasonable."
"So far I use free tier and happy with it. You can subscribe to business package if needed."
"I believe their performance has improved, but I'd like to refrain from discussing the pricing aspect related to the cloud. The pricing, in my opinion, could be simplified, and I think they should consider reevaluating the pricing for support, as it can be quite high. At times, this cost can make it challenging to choose CARFAGuard or opt for the support."
"We are using the free version."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"Cloudflare's pricing is not much higher and is good for middle-level organizations."
"It depends on your subscription level and the volume that you're spending with AWS. So, it is very relative to the consumption alignment in your subscription level. It is a well-constructed, scalable pricing option, but it is relative to how much you're spending on AWS. Because the more you spend, typically, the more you get off on services like this. I find it to be comparable to other solutions."
"We pay $3000 per month for the solution."
"The tool is cheap."
"The cost depends on traffic each month, so on average, it costs us between US$200 and US$300 per month."
"The tool's pricing is good."
"F5 BIG-IP Advanced Firewall Manager (AFM) is an expensive solution. They are one of the best in the market, but the price could be cheaper."
"F5 BIG-IP AFM is an affordable solution. There were not any additional fees other than the standard licensing."
"It is somewhat on the expensive side although it is worth the additional cost."
"We have purchased a five-year licensing package for the product."
"The solution is slightly on the higher priced side."
"The price of F5 BIG-IP AFM is a little more expensive than other firewalls on the market."
"The product is expensive."
"It's very expensive, and you pay extra for the models."
report
Use our free recommendation engine to learn which Distributed Denial-of-Service (DDoS) Protection solutions are best for your needs.
872,706 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
13%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
13%
Comms Service Provider
12%
Financial Services Firm
10%
Insurance Company
8%
Financial Services Firm
16%
Computer Software Company
14%
Performing Arts
10%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise7
By reviewers
Company SizeCount
Small Business8
Midsize Enterprise5
Large Enterprise14
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What do you like most about AWS Shield?
We have integrated the tool with Active Directory. The most important feature is that it's transparent and doesn't de...
What is your experience regarding pricing and costs for AWS Shield?
The pricing structure for AWS Shield is fair, yet it depends on the specific protections chosen. Enabling Shield Adva...
What needs improvement with AWS Shield?
Services always benefit from improvements, including AWS Shield. With respect to the Web Application Firewall, curren...
What is your experience regarding pricing and costs for F5 Advanced Firewall Manager?
The standard license is reasonably priced, but additional features like the WAF can be more expensive. There are plen...
What needs improvement with F5 Advanced Firewall Manager?
The appliance and features could be enhanced further, especially in terms of security. Some features like the WAF ( /...
 

Also Known As

Cloudflare DNS
No data available
F5 AFM, F5 Advanced Firewall Manager
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
netflix, dow jones, mapbox, pearson, rovio, youview, moviestar planet, asurion, payplug, hour of code
City Bank, Ricacorp Properties, Miele, American Systems, Bangladesh Post Office
Find out what your peers are saying about AWS Shield vs. F5 BIG-IP Advanced Firewall Manager (AFM) and other solutions. Updated: September 2025.
872,706 professionals have used our research since 2012.