Cloudflare offers at least two options that don’t require them to proxy TLS: Spectrum and Magic Transit.
Re:Fosstodon
by CameronNemo on Saturday September 02, 2023 @08:48PM
(#37366757)
I am reading the following in the link you posted:
When we’re under attack and using their proxy, Cloudflare can, unfortunately, content inspect our traffic.
I think they may have edited the post.
They recently claimed that "Even when we’re under attack, we still don’t use their TLS certificates, so Cloudflare will NEVER content inspect our traffic."
Cloudflare DOES NOT offer a passthrough-TLS option.
https://hub.fosstodon.org/fosstodon-and-cloudflare
This was pointed out with no response which makes me doubt more than just their technical abilities...
https://framapiaf.org/@remram44/110831829849477595