I know this isn't going to be a popular opinion on HN, but I had the misfortune of using CloueFlare when they first started and experienced firsthand how amateurish the team behind it was. I tried them again three years ago and didn't see anything to change my opinion. The security incident last year cemented it for me.

Thanks for your suggestion (honestly) but we won't ever be using CloudFlare so long as I have a say in it.

They've definitely improved since then. You need to be on the $200/month plan and basically turn off the WAF (which is craptastic), then things are pretty good.

All software has bugs. They just got unlucky, though their handling of the situation did raise a bunch of red flags.

I was considering using cloudflare as a free static asset CDN. On several of the speed test rankings they show cloudflare at or near the top.

I also have my dns with them on the free tier. But I am not running my regular traffic through their Network. I just plan to create a subdomain and run js, css, and images through it.

Would this not be recommended? Free CDN does seem too good to be true.

They explicitly forbid that use case in their ToS, so no, it is not recommended.

Oh, that is good to know. I had no idea that wasn't allowed.