> When you set up a Universal Path gateway — a gateway without a DNSLink record — you are creating an unrestricted gateway that allows users to access any content hosted on the IPFS network.
> This differs from a restricted gateway, which restricts the gateway to a particular piece of content (either a specific Content Identifier (CID) or an Interplanetary Name Service (IPNS) hostname).
That's basically like creating yourself an open proxy. Bad idea if you don't know what you are doing.
From your post:
> I sent a support email asking if they would consider a refund as the traffic was very likely not from my site visitors, one feature other ethereum gateway service providers offer that cloudflare does not is the ability to add a domain whitelist or even API key authentication. Cloudflare just lets you set up a domain name that they happily accept any requests to.
This isn't true. https://developers.cloudflare.com/web3/ipfs-gateway/concepts... is for this.
[1] https://developers.cloudflare.com/web3/ipfs-gateway/concepts...