Why we put Cloudflare in front of Vercel

Vercel is excellent at running Next.js. It is not a WAF, it does not give you fine-grained DDoS controls, and its CDN layer doesn't match Cloudflare's global footprint for static assets.

The setup is straightforward: point your domain's nameservers at Cloudflare, add a CNAME to your Vercel deployment URL, and set SSL to Full (Strict).