Cloudflare is good to prevent spam bots and that. But it can't protect you from attacks and hackers as they say they can. They should obv make a new option to hide the real IP Adress, and only shows them.
If you are having CloudFlare free version, you can easily find the IP adress, even with Paid one. By: ping direct.domain.com and it says the real IP Which isn't good. The website cache isnt good neither, if your site is down and it says use cached version, and if its a forum. Then you can't do anything, only view index.. Well, that's what happend to me