CDN (Cloudflare, AWS CloudFront) — content distribution + security.
WAF
Blocks SQL injection, XSS at server level.
DDoS protection
Cloudflare filters 17M+ requests/sec.
Bot management
Separating humans and bots.
Rate limiting
Max 10 requests/min on /login.
SSL optimization
CDN — modern ciphers, HTTP/3.
Cloudflare free
WAF, DDoS, SSL — all in free tier.