# Cloudflare

URL: https://donedeploy.com/technologies/cloudflare/

[!AI · September 25, 2026Hosted LLM APIs or Self-Hosted Open Models?GPT, Claude and Gemini APIs against self-hosted open models, compared on cost, privacy, latency and the engineering effort each one needs.](https://donedeploy.com/hosted-or-self-hosted-llm/)[!AI · September 16, 2026RAG in Production: The Boring Parts That MatterIngestion, chunking, refresh, evaluation and access control: the unglamorous work that decides whether a RAG system can be trusted.](https://donedeploy.com/rag-in-production/)

Questions

## Cloudflare: frequently asked

Can Cloudflare be bypassed by attacking our server directly?

Yes, if the origin's IP is known and open to everyone. We restrict the origin to Cloudflare's IP ranges or use Cloudflare Tunnel so there is no public origin at all.

Should Cloudflare settings be managed in code?

Yes. Clicking in the dashboard is fine for tests, but managing zones and rules with Terraform gives you review, history and quick rollback.

Running Cloudflare, or deciding whether to? Tell us what you have; the first consultation is free.

[Let's talk »](https://donedeploy.com/lets-talk/)