I'm not a fan of cloudflare because they have to take control of your DNS. We have too many instances where a WAF is acting up and we need to swing DNS over to bypass it. If cloudflare goes down, you can't do that. We currently use EdgeCast CDN/WAF, no complaints, but it's not a super smart WAF.