The product helps to create DNS records and connect Cloudflare to the original server. You can also do load balancing configuration. I work with SaaS solutions.
Technical Lead at a tech vendor with 10,001+ employees
Helps to create DNS records and connect Cloudflare to the original server
Pros and Cons
- "The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present."
- "The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
What is our primary use case?
How has it helped my organization?
In a single product and with minimal costs, you can get multiple features.
What is most valuable?
The most valuable feature of the solution is external DNS. It is also very secure. They have their own main server and once you configure it, the product takes care of everything. There are no issues in resolving IPs and low latency is also present.
What needs improvement?
The tool needs to improve caching of servers. The product needs to include PFX certificate as well.
Buyer's Guide
Cloudflare
November 2024
Learn what your peers think about Cloudflare. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
815,854 professionals have used our research since 2012.
For how long have I used the solution?
I am using the product for one year.
What do I think about the stability of the solution?
The tool is stable.
What do I think about the scalability of the solution?
The product is scalable and my company has around 5000 users for the tool.
How are customer service and support?
The product's support needs to be improved since they do not provide proper answers in the required time.
How would you rate customer service and support?
Neutral
How was the initial setup?
To deploy the solution, you need to enable the Cloudflare dashboard and create a container. After creating the container, you can create Cloudflare DNS records. You need to have Cloudflare CDN to reach your internal servers. The product's deployment will be lengthier for less experienced resources. It takes about 24 hours to complete the deployment process.
What's my experience with pricing, setup cost, and licensing?
The product's pricing is minimal compared to other products.
What other advice do I have?
The product requires maintenance from time to time. I would rate the product a seven out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator
Business process Advisor for RTP at a energy/utilities company with 10,001+ employees
Several issues related to their services highlight that it may be better to stay free and handle your DDoS protection yourself.
Subscribing to Cloudflare (from its website) means changing your nameserver IPs and your web server IPs.
Many people don't understand issues related to using the Cloudflare service:
Those people who want to hide:
In fact, Cloudflare is used by many people who want to hide the IP of their web servers from local authorities, governments or customers. That's why the Russian government threatens to block all the websites hosted on Cloudflare. Cloudflare at some point didn't cooperate with the Russian authorities and refused to provide the real web servers IP behind Cloudflare who violated the Russian law.
http://rkn.gov.ru/news/rsoc/news24880.htm
As governments become more and more efficient at blocking websites, we may see in the future this kind of issue coming back in other parts of the world. I will not talk about the moral aspect of it but from an IT decision maker point of view. If you have a clean website on one IP from Cloudflare you may suffer from a government decision to block the Cloudflare IP ranges which are public on the Cloudflare website.
Bad neighborhood:
Subscribing to the free Cloudflare service means getting a new IP address for your server. It is very much like migrating your website to a shared hosting website since many other websites that use Cloudflare also use the same IP address than you. Since the Cloudflare service is open to everybody several of those websites can be spammy. In SEO, this is what we call bad neighborhood.
You grant all powers to Cloudflare:
Since you use the nameserver from Cloudflare and a Proxy IP from Cloudflare, Cloudflare is the almighty who can do everything. They can stop access to your website. They can slow down access to your website too. They can inject code inside the code of your webpage thanks to the proxy. By the past, the app. smarterrors was a feature that was on when subscribing to Cloudflare. This feature replaced your 404 page by Cloudflare 404 page. So, in this case, it was the crème de la crème in terms of power delegation. They replaced your own pages with their own pages.
Also, they can spy on everything that the visitors send in clear to your web server. At the end, it is worth than giving your house keys to the NSA.
One more weak point:
if for some reasons the Cloudflare service is down, your website is also down. Are Cloudflare benefits offsetting this plausible scenario? From time to time, you may see an error 522 issued from Cloudflare when your website isn't available. In this case, you aren't able to know whether the issue come from Cloudflare or whether it comes from your web server.
Even if the downtime is short, on a yearly basis downtimes related to Cloudflare can be significant for online businesses.
Ddos protection:
Unfortunately, the DDoS protection service of Cloudflare is unclear. It is only a drop down menu defining the level of protection but it does not say anything. On the other hand, there are Anti DDoS techniques that are published and used to face DDoS attacks from a firewall. By the way, and unfortunately, i have seen a website that has been taken down with a DDoS attack even if they used Cloudflare.
The Pros:
From a technical point of view, Cloudflare is the best CDN. The IP addresses from their network have very good reputation. They are considered generic for Google rather than country specific. Also, their free service is pretty reliable for a free proxy.
It is also a DNS server free service:
Since Cloudflare is also DNS free service, it is possible to minimize the pressure on your own DNS server and use cloudflare as a DNS server since it is possible to put the cloudflare nameservers on behalf of your nameservers.
Conclusion:
Even if they provide good services from a technical point of view, the different issues related to the Cloudflare network model highlight that it may be better to stay free and have a longer ping & handling your DDoS protection yourself rather than giving everything to Cloudflare.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Cloudflare
November 2024
Learn what your peers think about Cloudflare. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
815,854 professionals have used our research since 2012.
VP/Director of IT
Robust, secure and innovative; technical support needs to be improved
Pros and Cons
- "New and innovative way to protect the client's data."
- "Technical support is lacking."
What is our primary use case?
Our primary use case would be as an immediate wrapper-type security solution as opposed to other solutions which put an in-point monitor on a workstation. I'm the VP of our company and director of IT.
What is most valuable?
They've implemented a tunneling system. It's not quite VPN, but it's not quite HTTP traffic, either. It's a very robust and different system which, in my opinion, is what needs to be done. New and innovative ways to protect the client's data should be the focus.
What needs improvement?
I think they have failed with their technical support. I feel I would have gotten to a solution faster, quicker, and more efficiently if they would have been there to just answer a couple of questions. I had to read so much documentation to validate what I was about to do versus what I had already known I could do. They almost lost me as a customer and it was only because I had a bit of time and the gumption, the drive to keep going. I'm glad I did, but I'm not happy with the road. It was bumpy.
For how long have I used the solution?
I've been using this solution for about three months.
What do I think about the stability of the solution?
Stability is great. I love their mechanisms, I love their GUI, I love their front end, I love their behind the scenes. Algorithms and everything, it all makes sense. I look at Microsoft and I say, you just don't make sense anymore. If you've been working in this industry for long enough, you know what makes sense and what doesn't make sense. And this box ware makes a lot of sense.
What do I think about the scalability of the solution?
The solution is open ended like with Cisco so quite scalable. I'm the only one using it and, at this point, I'm probably using 2% of their overall capacity. We're in the process of reevaluating our presence on the cloud, our data on the cloud and our ability to do work in the cloud.
How are customer service and technical support?
I've tried to contact technical support three times without any luck. I found the solution myself. If I look at the community, I see others have experienced the same issue.
Which solution did I use previously and why did I switch?
I carried out a comparison of Cloudflare with Call Ways, which was a good runner-up. Not only because of the sophistication of their cloud monitoring system, but they also have zero remediation, which means that they will tell you that you've got a problem even though they can't fix it. I'm also looking at Support Net as a primary firewall to replace the firewalls that I'm going to retire. I accidentally found Cloudflare, which offered me a lot more than any of the other companies, because the first thing it did was to encrypt all my traffic. Microsoft had failed us and as a result I had to shut everything down for three days and reconfigure firewalls and everything before bringing it all back up again.
How was the initial setup?
On this particular system, I didn't have as much budget as I would have liked, but I still had the redundancy that I wanted. The complexity was that things don't work the way they used to so I had to rethink things. In the end, deployment for the actual solution took about 10 minutes. It was a matter of just literally giving them a credit card and flipping a switch. It's been fine ever since.
What was our ROI?
All my data was encrypted before the hackers got past two firewalls. Encrypting your data does not keep hackers from getting in. In that respect, Cloudflare has proved to be a huge benefit for us.
What's my experience with pricing, setup cost, and licensing?
For now, the cost of Cloudflare is very reasonable compared to everything else. It's hard to say what will be down the track. Sometimes these companies offer very good deals early on and then annual fees increase as the companies become more successful.
What other advice do I have?
There is a lot of documentation and I would recommend reading it. I think that's how they want their tech support to work, through community. The community doesn't talk so well with each other like the Microsoft community because Microsoft's been around a lot longer. It isn't quite working perfectly yet and they don't have experts to answer the questions. They want the users to come to the realization for themselves, based on what I see in the conversations in the communities. It's a millennial mentality. We don't have to be involved, we'll just make the product and let them solve their own problems. That's an issue for me.
I would rate this solution a seven out of 10.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior SEO Strategist at a healthcare company with 201-500 employees
Easy customization of the Page Rules and simplicity of the dashboards are key
Pros and Cons
- "The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules."
- "One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country."
What is our primary use case?
I work as the Senior SEO Strategist on a very small in-house team of digital marketers for Lakeview Health, a drug and alcohol rehab. Upon starting my role, one of my first tasks was migrating our websites to a new web hosting provider so that we could take ownership of them. With all our sites developed in WordPress, I decided on hosting with WP Engine which recommended Cloudflare in the setup process.
In the past, I worked in environments where the developers and IT team managed the websites, so I admit that there are gaps of knowledge in my understanding of how the internet works. Using Cloudflare made the process of migrating much easier and gave me the satisfaction of knowing we’d receive enhanced security features, alongside a reputable CDN, simple DNS hosting, and the many other solutions Cloudflare offers.
How has it helped my organization?
I manage these websites independently within my organization and, with exception of a third-party vendor, I am the only one that has access to our Cloudflare account. It helps me ensure the sites are running optimally and securely.
What is most valuable?
The simplicity of the overall dashboard makes it a great product for a user like me who has less understanding of the internet than a developer or other more technical people. It gives me peace of mind. I also love the easy customization of the Page Rules.
What needs improvement?
I will say, in the years I have used Cloudflare, one thing I love is the constant improvements and developments being made.
One area of improvement is in the Access Rules. Hypothetically, if we wanted to block or challenge traffic outside of the United States, the only way to currently do that (as far as I know) is to enter every single country outside of the United States. That could be a labor intensive job. A solution could be to enable users to create a rule where traffic is only allowed within a certain country.
For how long have I used the solution?
Three to five years.
What other advice do I have?
I would rate Cloudflare a nine out of 10. I haven’t used any other solutions that might compete with Cloudflare, so I am a bit biased, but for ease of use, features, and cost effectiveness, I think it’s a great solution.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
SecOps Lead at a tech services company with 51-200 employees
One console, easy to maintain, and scalable
Pros and Cons
- "Cloudflare has many features."
- "In the last two years, there has been a certain amount of downtime when using the VDM."
What is our primary use case?
We are using Cloudflare for the CDN for our applications. We deployed the solution as SaaS.
What is most valuable?
Cloudflare has many features. We can control profits, block attacks, and use a Global Location CDN. Additionally, we have a single console from which we can manage multiple tasks.
What needs improvement?
In the last two years, there has been a certain amount of downtime when using the VDM. Compared to other vendors and Cloudflare, there will be more downtime. We encountered this issue last year, and there have been a few occasions when Cloudflare was not accessible in certain regions, not all global regions or speed regions, but the website went down and it took Cloudflare a long time to restore the service.
For how long have I used the solution?
I have been using the solution for two years.
What do I think about the stability of the solution?
We have experienced a few periods of downtime in the last two years, but the solution is generally stable.
What do I think about the scalability of the solution?
The solution is scalable.
How was the initial setup?
The initial setup is not difficult. All the steps for deployment are documented. We followed the step-by-step instructions for configuration.
What about the implementation team?
The implementation was completed in-house by three employees.
What's my experience with pricing, setup cost, and licensing?
I give the price a five out of ten.
What other advice do I have?
I give the solution an eight out of ten.
Maintenance is easy; we receive a notification whenever maintenance is needed, as well as if a major restoration is required and what the likelihood of the system going offline will be.
I recommend Cloudflare.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Systems and New Media Manager at a leisure / travel company with 51-200 employees
Page rules help shape traffic to the appropriate pages.
What is most valuable?
- Caching: Caching helps save bandwidth with the CloudFlare CDN
- Page rules: Page rules help shape traffic to the appropriate pages.
How has it helped my organization?
CloudFlare's caching brings the load speed down from 4.32 seconds to 2.45 seconds.
What needs improvement?
The Always Online feature has room for improvement. It seems to work sometimes and not others even with the pro version.
The feature shows a cached version of your live site if your host is offline. When your site is offline CloudFlare shows this:
For how long have I used the solution?
We moved our DNS to CloudFlare about three years ago.
What do I think about the stability of the solution?
I have not encountered any stability issues; the platform is rock solid.
What do I think about the scalability of the solution?
I have not encountered any scalability issues; moving to the pro version was a simple as a click.
How are customer service and technical support?
Technical support is 10/10. Our one call about a caching issue was easily fixed and it turned out to be a problem we caused, not CloudFlare.
Which solution did I use previously and why did I switch?
We used our own name servers and Snort. We switched due to simplicity of the CloudFlare interface.
How was the initial setup?
Initial setup was straightforward. CloudFlare's setup wizards made it easy.
What's my experience with pricing, setup cost, and licensing?
Start with the free plan and move up as needed. It was easy to upgrade and downgrade.
Which other solutions did I evaluate?
We looked at GoDaddy DNS and Amazon DNS services. After reading the reviews online, we jumped to CloudFlare.
What other advice do I have?
Give it a shot. The setup was easy and you can see the results right away.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Nice Review Mr. Matthew!
I agree to the Room for Improvement you provided. Should be considered by the Cloudflare community.
Owner/Developer at a marketing services firm with 51-200 employees
I needed to do something differently because we were getting hacked often.
I’ve been with CloudFlare for a year and a half at the time of writing this post and realized that I never gave it a review of any kind. What kind of terrible person am I?
I worked for a couple a few years ago who was using a content management system called Joomla to build their clients’ sites. We would launch a site by simply pointing the DNS settings to our servers and calling it good.
Then we started getting hacked. A lot.
With the number of sites we had on our server, the exploits found in the plugins being used, as well as poor server practices, we had a huge target on our chest.
A while later I decided to leave to company to go on to do other things. One of those things was to open my own web development and hosting shop.
First things first: Get away from Joomla.
Next: Learn WordPress.
Now let’s get a server setup.
The first thing I did when I got my server setup was make sure that no one was allowed to host on my server unless we ran all of the DNS through CloudFlare. No exceptions.
A couple of things I noticed when I got all this in place:
- My sites ran faster
- My server load was lower
Most importantly: My sites never got hacked (fingers crossed).
I attribute the latter to a couple of things, but mostly I would like to think that CloudFlare had a huge part in that. If you don’t know what CloudFlare is, watch their promotional video.
Here’s some other cool stuff about this site from the last 30 days:
- CloudFlare saved me more than 54,000 server requests
- Cloudflare saved me more than 600 MB of bandwidth
- Cloudflare blocked 50 threats to my site
And how much do I pay for CloudFlare? Nothing.
That’s pretty amazing stuff! I didn’t have to pay anything for better website security and reduced server load.
If you’re looking for the same, be sure to go get signed up at CloudFlare. It’s easy to setup and the results speak for themselves.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior Dev Ops Engineer at a tech services company with 501-1,000 employees
Brings enterprise-grade features to my small business clients at low or no cost
Pros and Cons
- "When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers."
- "Centralized, full-featured DNS."
- "Sometimes their more advanced caching tools can cause higher first-byte times and problems with JavaScript."
- "They lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem."
What is our primary use case?
I use this for DNS for many of my former clients and personal sites. When using services like Heroku, Cloudflare is very useful for CNAME flattening. I also use it for their end-to-end SSL with TLS authentication on nginx for securing servers.
The second major use case is as a CDN where I will push logic to the edge for caching and redirects.
How has it helped my organization?
I have not used it at my current organization, but in the past I have used it to bring enterprise-grade features to my small business clients at low or no cost.
What is most valuable?
Centralized, full-featured DNS.
What needs improvement?
Sometimes their more advanced caching tools can cause higher first-byte times and problems with JavaScript.
They also lack a good way to manage DNS as a company, since everything is relegated to single account logins until you get to the higher levels. They have come out with a paid feature to remedy this, but I have not had a chance to fully review it yet to know if it fixes the access problem.
For how long have I used the solution?
More than five years.
What do I think about the stability of the solution?
There has been some downtime over the years, but it was usually handled well.
What do I think about the scalability of the solution?
I have only scaled this to a few million viewers with a couple TB of traffic, but I didn’t see any issues.
How are customer service and technical support?
I have mainly been on their lower accounts which don’t really come with support.
Which solution did I use previously and why did I switch?
I have used a couple of different solutions like Incapsula, CloudFront, and Akamai, but for different projects, not before or after.
How was the initial setup?
It is very easy for someone who knows DNS. It is somewhat opinionated and pushes you into higher tiers, but overall it is easy.
What's my experience with pricing, setup cost, and licensing?
You can get a lot out of the lower accounts.
Which other solutions did I evaluate?
I have used several in the space and I still use, Route 53, DynDNS, etc.
What other advice do I have?
This product is good for simple things, but you may need other tools for more fine-grained control of specific portions.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Download our free Cloudflare Report and get advice and tips from experienced pros
sharing their opinions.
Updated: November 2024
Product Categories
Distributed Denial of Service (DDOS) Protection CDN Managed DNS Cloud Security Posture Management (CSPM)Popular Comparisons
CrowdStrike Falcon
Cisco Umbrella
Quad9
Prisma Cloud by Palo Alto Networks
Microsoft Defender for Cloud
Darktrace
Zscaler Internet Access
Microsoft Azure Application Gateway
Azure Front Door
Akamai Connected Cloud (Linode)
AWS WAF
Tenable Security Center
Palo Alto Networks WildFire
F5 BIG-IP Local Traffic Manager (LTM)
Buyer's Guide
Download our free Cloudflare Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- We are looking at managed DNS providers and want to know what others are using
- Which product would you choose: A10 Thunder TPS, Cloudflare or Corero?
- Which would you choose - Cloudflare DNS or Quad9?
- We are looking at managed DNS providers and want to know what others are using
- Prolexic vs. Arbor Networks: How do they compare?
- Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
- How does a WAF help to protect against DDoS attacks?
- DDoS solutions: Any other solutions to consider aside from Radware DefensePro and F5 Silverline DDoS Protection?
- Which is the best DDoS solution and why?
- What is the difference between denial of service and distributed denial of service?
Devon, thank you for the great insight and facts.
-MG