Actually, people recommends Cloudflare, that is fine for DoS.
DoS and DDoS are different things!
Cloudflare can handle with some low DDoS Attacks, and works very well in it.
But like
@NX_NULL said, there are many Stressers that can bypass Cloudflare and make your website going down easily.
Script kiddie can do it, easily. It's just costs about 20-30$ per month for few attacks. And that can ruin your business or website.
My advice is, to go a Hosting Provider with good DDoS Protection, Cloudflare don't will handle with medium and large attacks.
And if your provider doesn-t have ddos protection, you will go down even with Cloudflare.
Cloudflare isn't the best solution or the cure, how some people are trying to say in this thread.
Cloudflare won't save you, from big attacks. Unless you pay them.
Your Hosting Provider need to have a Anti-DDoS Protection, or if they do bypass you can be down for hours, days or weeks.