1Dot Yes, but note the 403 error code. You can't rely on this site to present real figures unless you whitelist the IP address at CF. On investigation, it's being blocked by the Browser integrity check but the traffic request does make it to my server which responds.
Very odd. 100% unreliable test in this case though.
rob006 Very interesting. I see your site is also WordPress - impressive !
1Dot Phenomlab But I can see the ip accessed my server in my server logs and also screenshot is of site not that access denied.
Same here
1Dot Yes but there are a lot of differences I used that pingdom you share see what I got
Yes, but look at your load time ! Anything over 1 second these days is considered slow.
My website have a C grade on GT Metrix. I don't use Cloudflare.
https://gtmetrix.com/reports/discuss.stylix.ynh.fr/jEwisSKD/
There are two main reasons I've been using cloudflare behind a proxy
Really fast DNS updates. Sometimes I will allocate a forum to another server and not having a "up to" 48 hour update window is nice.
It also hides some ports like ssh, even though it doesn't seem to help cut down on logs much 
I'll share my experience in detail.
Actually I feel using CF for DNS is only good Choice Else a Myth.
TTFB Race ...
1Dot i have setup a cloudflare account, you mentioned earlier
1Dot You can still connect to terminal when you use cloudflare all you need to change NameServer and cloudflare doesn't even touches port 22
After changing all proxied, below in SRV there is still parts of my host server, for example:
Which one should we use in Target
HERA.NS.CLOUDFLARE.COM or JIM.NS.CLOUDFLARE.COM
is it really the one we should change for terminal to work?
Braden for terminal to work you should just use SSH and connect to the IP address instead of the hostname. That way, you won't expose your IP address.
1Dot this is incorrect. If you try to access SSH using the name of the domain (for example, ssh admin@nysite.com) and you are behind CF this will fail. It's because of the A record entry which CF will mask with one of its own IP addresses instead behind it's proxy.
The nature of TCP is that the connection request waits up to 30 seconds for an ACK response it will never receive, and so it times out as a result.
Braden you can use the local command prompt on Windows for this. Just just ssh myuser@ipaddress -p 22 (I'm assuming Windows - it'll work massively in Linux also from CLI and you won't need the port if you are using the default.
and it's the same with discuss.
but instead you'll have to use a SSH program, omg! I wonder which answers will 1Dot come with after reading this