CF can cause a small DoS as it does some aggressive pre-fetching. So your server needs to handle short bursts really well. Not to mention whitelist CF's IP spac

CF can cause a small DoS as it does some aggressive pre-fetching. So your server needs to handle short bursts really well. Not to mention whitelist CF's IP space both in the firewall and nginx rate limiting.