TL;DR: We've been on the Cloudflare Business plan ($250/month) for years. They suddenly contacted us and asked us to either pay them $120k up front for one year of Enterprise within 24 hours or they would take down all of our domains. While this escalated up our business we had 3 sales calls with them, trying to figure out what was happening and how to reach a reasonable contract in a week. When we told them we were also in talks with Fastly, they suddenly "purged" all our domains, causing huge downtime in our core business, sleepless nights migrating away from CF, irreparable loss in customer trust and weeks of ongoing downtime in our internal systems.
And that’s why they should never offer “unlimited” plans, because edge cases will cause issues. I would have definitely opened a support ticket right away the moment you found you you were talking to sales. Those two organizations tend to be diametrically opposed and you can usually find out what’s going on when commission isn’t involved.
This is a problem in general when relying on other vendors for things. I know you can’t just spin up your own CDN, but not locking yourself in goes a long way. The article gives some good tips for how to safeguard your company, especially around domain names, that’s the big thing. It would have been easy to change up an A record and point to a static page saying “Sorry, CloudFlare fucked us” as long as you still control DNS.
And that’s why they should never offer “unlimited” plans, because edge cases will cause issues. I would have definitely opened a support ticket right away the moment you found you you were talking to sales. Those two organizations tend to be diametrically opposed and you can usually find out what’s going on when commission isn’t involved.
This is a problem in general when relying on other vendors for things. I know you can’t just spin up your own CDN, but not locking yourself in goes a long way. The article gives some good tips for how to safeguard your company, especially around domain names, that’s the big thing. It would have been easy to change up an A record and point to a static page saying “Sorry, CloudFlare fucked us” as long as you still control DNS.