I found a website k6.io which allows you to load test websites and API’s using AWS. With a free account you can test from one location with 50 virtual units for up to 12 mins. Spinning up a load test of get requests, Cloudflare served up all the traffic no problem, leaving my minimal VPS web-server alone. Then I tried again with post requests and BAM… 100% CPU load, response time over 6 seconds.
What was happening? Shouldn’t Cloudflare stop things like this?