[genwin]

I've been wondering myself, if CloudFlare helps against DDoS attacks when the page is dynamically generated for each user. For static pages it should help.

[joshmcmillan]

If the attack is working by essentially flooding Basecamp's network links until they reach capacity, then yes, it could. CloudFlare could simply filter out malicious traffic and only pass on legit requests to Basecamp.

That's obviously very much dependent on the kind of attack and whether CloudFlare has more network capacity than Basecamp (which I would imagine is highly likely).

[singlow]

CloudFlare does more than just caching. Even on non-cached pages it can filter and otherwise mitigate traffic that it has identified as malicious.

[kalleboo]

Correct, many times I've had to fill out a captcha to load a CloudFlare-protected page.

[xxdesmus]

The sensitivity/frequency by which the captcha challenge page gets displayed is dependent on the security settings selected by the website owner.