Dealing with denial of service attacks in a way that doesn't involve needing to own more bandwidth then the attacker can saturate would be something to look into.
That blog post was released on April 1, but it isn't a joke (Cloudflare announces things that seem crazy but are real on April 1 instead of doing a joke)
Disclaimer: I'm an engineer at Cloudflare, but not on a team related to this.