Cloudflare will not mitigate all attacks, because some large scale attackers can overwhelm their capacity. Cloudflare is best for "run-of-the-mill" DDoS attacks that are NOT specifically targeted at you, or trivial to block (like in the case of DNS reflection). If you are being directly targeted, or if your attack is very sophisticated - it may be necessary to utilize more expensive services like scrubbing centers.