Comment by hombre_fatal
4 years ago
Cloudflare UI lets you pick between levels of protection.
By default I don't think it shows the interstitial "checking your browser" page. But if you pick the "I'm under attack" option, it dishes that page out freely. Popular services that experience a lot of abuse seem to stay with that option.
Though everything I've built in the gaming/gambling niche seems to attract abuse no matter how small the service is. It's pretty frustrating when your weekend project can't run on a $5 VPS because someone is keeping it offline for the lulz. I totally understand why people default to Cloudflare + "I'm under attack" mode, and I don't think it's Cloudflare's nor the website operator's fault. I think here it's useful to temper our ire with the reason people use DDoS protection.
You don't need to stay in that noise. CF is pretty decent with detecting DDoS on its own and switching on temporary protection as needed. (Not every time, not often enough)
Not they're also not the only game in town. You can use less crappy/evil providers instead.
Who else would you recommend? (Genuine question)
Fastly, GcoreLabs, Akamai, you may also have other built-in options available from your hosting provider.
Can't edit the previous comment now, but it should say "you don't need to stay in that mode".