[Mashiro]

@hamed

You must be referring to the following sentence of mine?

Another thing that helps is CloudFlare as it will filter out a lot of bots and it includes DDoS protection BUT THERE IS THE BIG BUT... as a free CloudFlare customer you're not really entitled to any guaranteed protection in terms of DDoS. If the attacks become too big CloudFlare will disable the protection for your domain and the attack will hit your real server directly.

If you don't refer to that sentence please explain what exactly you mean instead of quoting a whole post with a lot of content.

If you are indeed referring to the quoted sentence I ask you kindly to read the sentence once again slowly and carefully.


I will mark the most important part of my sentence and explain it to you again:

- as a free CloudFlare customer you're not really entitled to any guaranteed protection in terms of DDoS.
-- This means that with the free CloudFlare plan you get free protection, too. However the free protection level has no fixed obligations from CloudFlare's side to provide you the protection all the time and for all attack volumes. Thus you get no guarantee to be protected at all times. CloudFlare is a for profit company and therefore wants to make money. Free clients that attract many attacks or big attacks are a huge loss for CloudFlare.

- If the attacks become too big CloudFlare will disable the protection for your domain and the attack will hit your real server directly.
-- There is not really much to add here. Read it once again. It says the protection will be shutdown NOT YOUR SITE! It is clearly written. Not sure how you can even read or understand that "the site will be shutdown". And not sure how you can even remotely read or understand that the DDoS protection service would shutdown when your site is attacked. Neither your site nor the protection service will shutdown. The protection for your site will be shutdown. Thus your site will be directly affected by the DoS/DDoS attack(s). All traffic will be routed directly to your real server instead of CloudFlare's DDoS protected infrastructure.


The above said and explained things have happened already to sites that used CloudFlare free plan and got attacked with very big attacks or have been under attack for too long. These events even made it into some form of news that you might have seen or might not have seen (heavily depending in which kind of scene you are active).

Keep this in mind with all free services! Free never is really free.