109

Five reasons we offer a free version of the service and always will: Data: we see a much broader range of attacks than we would if we only had our paid users. This allows us to offer better protection to our paid users. Customer Referrals: some of our most powerful advocates are free customers who then "take CloudFlare to work." Many of our largest ...


27

CloudFlare describes Rocket Loader like this... Rocket Loader is a general-purpose asynchronous JavaScript loader coupled with a lightweight virtual browser which can safely run any JavaScript code after window.onload. Rocket Loader does a bunch of things: It ensures that all the scripts on your page will not block the content of your ...


24

Yes, it's a caching reverse proxy. "It depends". By default only things like images and CSS are cached, but you can set the cache level per zone and set Page Rules to override what is cached or should not be cached. Static HTML can be forced to be cached by a page rule, but dynamic content obviously cannot. The exception here is if you have the Business or ...


24

It does not offer unlimited bandwidth. Unlimited bandwidth does not exist and is an impossibility. It is only a marketing term that states "the limit is higher than most users require". There is always a catch somewhere when anything is unlimited. With something that says unlimited, you are worse off than a service that has a specific known limit (...


10

I'm a long time user of Cloudflare. I have many sites on their free plan and a few on their Pro plans. They can offer this free plan because they earn enough from their Premium plans to cover the costs. By offering a free plan to thousands of users, they can analyse more web traffic, which makes their algorithms smarter and their premium plans worth so ...


9

This is something that they recently started offering as an enterprise feature see: https://support.cloudflare.com/hc/en-us/articles/206190798-Using-Resolve-Override-in-Page-Rules


8

There's another aspect that should be mentioned here: Freemium is a pricing strategy by which a product or service (typically a digital offering or application such as software, media, games or web services) is provided free of charge, but money (premium) is charged for proprietary features, functionality, or virtual goods. It's a common approach to get ...


8

Sources say that Facebook/Externalhit does not respect crawl-delay in robots.txt because Facebook doesn't use a crawler, it uses a scraper. Whenever one of your pages is shared on Facebook, it scrapes your site for your meta title, description and image. My guess is that if Facebook is scraping your site 11,000 times in 15 minutes then I think the most ...


7

As stated on the CloudFlare website: 2500% guarantee This extended Service Level Agreement guarantees 100% uptime, and adds a multiplier to owed service credits resulting from any lapse: 5 times any downtime minutes and 5 times customers affected = 2500% guarantee Seems fairly safe to say: Go marketing dept.! Make it sound nice.


7

Flexible SSL is NOT fully secure CloudFlare's Flexible SSL provides encryption from the user to CloudFlare's servers, but not from their servers to the website server. This avoids the hassle of installing (and renewing) a certificate on your web server, but does mean traffic gets sent plain text over the 2nd half of the journey. The benefits of this setup ...


6

CloudFlare don't allow this in their Terms of Use. I received the following email from CloudFlare when I attempted this on an image-only subdomain once: Also note here -- you seem to only be using CloudFlare for this products.xyzmedia.co.uk subdomain. We do not permit CloudFlare to be used only for static file delivery. You will need to have xyzmedia.co....


6

Your invalid certificate authority error is due to the fact that CloudFlare issued it, not because of how you were routing traffic. This is because you used a type of certificate meant only to secure communication between your origin server and CloudFlare's network. It is issued via what they call their "Origin Certificate Authority" explained here. When ...


6

It's really to do with when the redirect occurs. WordPress/PHP naturally occurs later than .htaccess, so the HTTP request has already passed to PHP before the redirect occurs. .htaccess is processed at the very start of the request, before it is passed to PHP. However, if you are using CloudFlare then you should create a page rule to redirect HTTP to ...


5

Just to add a little more clarity: There's a pretty good article on Quora about how CloudFlare works. Which site resources are affected? Only static ones? What CloudFlare caches by default. "Does CloudFlare act as a cache proxy? Say, I have a bunch of images on the pages of my site. Does CloudFlare cache all those images on each of their data centers and ...


5

The short answer is that Cloudflare is safe. Cloudflare is essentially nothing more than a content delivery network (CDN). The theory behind it is that they will cache copies of your website to their servers, which are spread across different locations. When a visitor visits your site the server that is closest to them is chosen and the connection has less ...


5

We can actually manage the DNS for the record pointing to Tumblr. You can't, however, have our proxy (orange cloud) turned on for the record & it should be grey (direct).


5

It sounds like you are trying to update your nameserver records through your DNS host. If you need to modify an A record or a CNAME record, you would want to do so through your DNS host. However, name server records are not modified with your DNS host. Cloudflare is asking to be your DNS host. You need to set the nameserver records through your domain ...


5

Yes: add the root domain, then you can select which subdomains to route through CloudFlare in the DNS tab, at which point you can disable CloudFlare on the domain and enable it on the subdomains by clicking the cloud icon next to the relevant DNS record. In this example, I have georgegarside.com through CloudFlare and server.georgegarside.com bypassing ...


5

I found the answer here: https://support.cloudflare.com/hc/en-us/articles/200170566-Why-isn-t-SSL-working-for-my-site- Your domain/sub-domain is not active on Cloudflare’s network Cloudflare’s SSL will only be present for visitors to your website after you have validated the SSL certificates to your root or www DNS record by orange clouding these ...


5

Since your DNS will be hosted with Cloudflare, you must create an A RECORD within Cloudflare and then within cPanel you must make a subdomain or in WHM another account. There are no DNS entries required within cPanel because your DNS is not managed by it. Adding an add-on or subdomain within cPanel will setup the virtual host file to work with the A record ...


4

I have observed similar differences when comparing Apache logs with analytics and have seen a (one day) ratio of 1000:1. It is remotely possible that you have some userbase that blocks Google-Analytics with products like NoScript and Ghostery, or doesn't run any javascript at all. I have found that Piwik gives better reports and can be setup such that ...


4

CloudFlare acknowledge this and provide the following explanation: CloudFlare Analytics vs. Other Services Google Analytics and other web-based analytics programs track visitors that trigger JavaScript. As a result, threats, bots and automated crawlers are not recorded since these visitors typically do not trigger JavaScript. These services ...


4

Okay there are a few ways to skin this so to speak. First get the IP of your new server. Run a ping using a tool like Just Ping. There you can see your global ping times. This will give you an idea on how long it takes to connect to your server from large cities around the world. Ten for more information you'll want to use something like Pingdom Tools to get ...


4

As I posted on StackOverflow... Assuming your video content is simply a file downloaded over HTTP/HTTPS (and not streamed over some other protocol) then it appears that CloudFlare might actually support this. I just tested an MP4 video file on a client's website and it appeared to be cached by CloudFlare correctly. My CloudFlare settings page rule: The ...


4

What is the problem with this cookie? You are using their service and want to benefit from their service and their security – according to Cloudflare, this cookie helps especially for security reasons. Regardless of that, this type of cookie is exempt from the cookie law message: However, some cookies are exempt from this requirement. Consent is not ...


4

No, there is no way to turn the cookie off if we are proxying the record (if you had a subdomain not running through our proxy in your DNS settings, then we wouldn't add the cookie because it is going direct to your server). The cookie is basically what makes security (like a challenge page) work.


4

You need to understand what a CDN is. CDN means Content Delivery Network, rephrazed; a network to deliver your content. Indeed, CloudFlare can't speed up your PHP scripts or MySQL queries. CloudFlare will host your static resources (images, videos, JS and CSS files, etc.) on many servers over the world to permit to all your visitors to download them faster (...


4

From my understanding and experience it seems to me perhaps you've misunderstood how CDN caching works: From the example you've given, the CDN would not ask your web-server when the file was last modified because you've already told it that the file has expired and will therefore need to be re-fetched anyway. Web browsers will only send an If-Modified-Since ...


4

As covered here, create a Page Rule for URLs containing the wp-admin and wp-login directories to prevent CloudFlare from caching them. Also, disable Rocket Loader, as it may inadvertently break certain functions (editors, etc.) in your WordPress back end. Also try changing these other settings in your CloudFlare account under Performance Settings: ...


4

The short way to do this is using the API. A short script in your preferred language will do the trick. https://api.cloudflare.com/#dns-records-for-a-zone-update-dns-record


Only top voted, non community-wiki answers of a minimum length are eligible