CloudFlare is providing a basic service that the government should be providing itself.
If colleges need to guarantee first amendment rights since they are partially government funded, and the Internet itself is partially government funded, then I think there is a decent case for the government being required to provide a public solution for mitigating DDOS attacks if the market can't sort it out.