I understand that. That doesn't mean you don't have to worry about security.
Most stacks would crumble under a relatively small L7 ddos that Cloudflare would not likely mitigate.
Most stacks would crumble under a relatively small L7 ddos that Cloudflare would not likely mitigate.
Being using them for many years, way better and cheaper than AWS.
The WAF is $20/month and as far as I know you don't get it automatically for free by using Cloudflare Tunnel, though feel free to correct me. There was the case of them enabling mitigations for the log4j vulnerabilities for anyone on Cloudflare, but that was an exception.
I haven't used CF in anger, so can't vouch for it more than that.