Note that the Cloudflare free plan offers basic DDoS protection, which isn't the best protection.
X10Hosting I believe would migrate the attack, and of course there's a large chance of your site being put down for a bit, but it should be put back up shortly (this is to attempt to lower the amount of resources used).
Note that the second part was from what I've witnessed when someone was DDoSing my friends site here and I ended up being on the site at the exact moment when it was happening. X10 has recently been getting changes, so the DDoS migration may also change (or already it did, hopefully preventing less of a disruption of service).