We have a fairly complex set up with Varnish behind Cloudflare (which we use to cache static HTML pages too).
So Varnish should only be triggered once a Cloudflare node does not have the page cached. This reduces the hit rate since most requests are fairly unique (unless several CF nodes do not have the page cached).