Cloudflare doesn't block ddos because any real ddos will be able to bypass even I know how. There is no real protection for ddos as long as the person has a strong enough botnet.
I just experienced a 10GBPS ddos and my host just nulled my ip like a baws.
I just experienced a 10GBPS ddos and my host just nulled my ip like a baws.