Does CloudFlare Really Protect?

Question

DDoS Protection

If I do not leave any traces of the real ip address of the server in DNS, letters, requests. Can CloudFlare really protect against DDOS? On the Pro plan or on the Buisness plan?

Answer 1

If all references to the real IP were erased, and IP CloudFlare was prescribed for its place, then that's not all. You also need to request a new address from the hosting, because. the old one may be known to attackers. If you have a website, then you can view it through IP History. If the IP has not been changed, then you will be attacked directly by it and not by CloudFlaer, not by Qrator, and any other service will not be able to protect you. They will hit directly on IP, bypassing protection.
With the change of IP, you also need to configure access restriction from the outside either at the firewall level or on nginx (or apache). Usually, protection services say their subnets, so for them you need to allow access to the server + also register your IP, and close access to the rest.
These actions will help to avoid an attack. As for CloudFlare, it will be able to protect both Pro and Busness. The only difference is in the extra. settings. On the Free plan, they will only be able to offer mitigation from the attack. If you come under attack, they will offer a Pro plan. If they attack frequently, they will advise you to choose the Business or Enterprise plan.
WAF (Designed to neutralize threats to the confidentiality of site data) will be available on any paid tariff, the functionality will not depend on a specific tariff. If you have a Pro plan, then there will be a basic list of rules in WAF with mod_security and an open source list of owasp ruleset. If you select Business, you will have the same features as Pro + you can write your own rules.

Answer 2

Do you need a translation?
https://www.cloudflare.com/ddos/