You are right I missed the DDoS part and that cf is not a typical uplink in this use case.