"We've Been Hacked" — No, That Is Cloudflare: Reading Edge Traffic Before You Blame the VM

A presales war story about a firewall full of "abnormal sessions", a team ready to block their own origin IP, and the three questions I now ask in Cloudflare before anyone calls a server compromised.