Somewhat sad OP is using cloud flare. If it was 2001 you'd just have it with some basic firewall appliance in-front of it.