We don't know. You haven't provided many details for us to help you with. You might be able to ask in #next-on-pages if you provide some more information.
I'm not sure which one you mean, but the only way you'd get a ping/ICMP to actually go through the tunnel is with WARP Private Networking. Anything else would either be against Cloudflare's Anycast IPs, or not work.
I'm not sure how measuring would minimize the ping, but I would just keep in mind the following For example, if you send a request through your tunnel You -> Edge Cloudflare Datacenter -> Cloudflare Datacenter your tunnel is connected to -> Tunnel By pinging your tunnel's hostname, you'd only see the first step. Additionally, not all Cloudflare datacenters support tunnel connections, the datacenter you connect to/your ping would hit isn't necessarily where your tunnel would connect to
My understanding is it doesn't force you to solve the captcha, it's just if you go above the x requests per time, you need to solve a captcha or wait out the period until you are under the ratelimit
youre challenging for a threshold of a minute, after that minute threshold expires the user will be allowed to access the site regardless of whether they passed the challenge or not. thats what you configured