We’re rewarding the question askers & reputations are being recalculated! Read more.
90

Five reasons we offer a free version of the service and always will: Data: we see a much broader range of attacks than we would if we only had our paid users. This allows us to offer better protection to our paid users. Customer Referrals: some of our most powerful advocates are free customers who then "take CloudFlare to work." Many of our largest ...


26

CloudFlare describes Rocket Loader like this... Rocket Loader is a general-purpose asynchronous JavaScript loader coupled with a lightweight virtual browser which can safely run any JavaScript code after window.onload. Rocket Loader does a bunch of things: It ensures that all the scripts on your page will not block the content of your ...


23

Yes, it's a caching reverse proxy. "It depends". By default only things like images and CSS are cached, but you can set the cache level per zone and set Page Rules to override what is cached or should not be cached. Static HTML can be forced to be cached by a page rule, but dynamic content obviously cannot. The exception here is if you have the Business or ...


19

It does not offer unlimited bandwidth. Unlimited bandwidth does not exist and is an impossibility. It is only a marketing term that states "the limit is higher than most users require". There is always a catch somewhere when anything is unlimited. With something that says unlimited, you are worse off than a service that has a specific known limit (or pay per ...


10

I'm a long time user of Cloudflare. I have many sites on their free plan and a few on their Pro plans. They can offer this free plan because they earn enough from their Premium plans to cover the costs. By offering a free plan to thousands of users, they can analyse more web traffic, which makes their algorithms smarter and their premium plans worth so ...


7

As stated on the CloudFlare website: 2500% guarantee This extended Service Level Agreement guarantees 100% uptime, and adds a multiplier to owed service credits resulting from any lapse: 5 times any downtime minutes and 5 times customers affected = 2500% guarantee Seems fairly safe to say: Go marketing dept.! Make it sound nice.


7

Flexible SSL is NOT fully secure CloudFlare's Flexible SSL provides encryption from the user to CloudFlare's servers, but not from their servers to the website server. This avoids the hassle of installing (and renewing) a certificate on your web server, but does mean traffic gets sent plain text over the 2nd half of the journey. The benefits of this setup ...


7

There's another aspect that should be mentioned here: Freemium is a pricing strategy by which a product or service (typically a digital offering or application such as software, media, games or web services) is provided free of charge, but money (premium) is charged for proprietary features, functionality, or virtual goods. It's a common approach to get ...


7

Sources say that Facebook/Externalhit does not respect crawl-delay in robots.txt because Facebook doesn't use a crawler, it uses a scraper. Whenever one of your pages is shared on Facebook, it scrapes your site for your meta title, description and image. My guess is that if Facebook is scraping your site 11,000 times in 15 minutes then I think the most ...


6

This wasn't possible when you asked the question. This is now possible with PageRules. Note: You want to exclude the admin section of your site with a PageRule as well. If you do cache everything and the admin section is included, you will likely see some sort of looping error.


6

This is something that they recently started offering as an enterprise feature see: https://support.cloudflare.com/hc/en-us/articles/206190798-Using-Resolve-Override-in-Page-Rules


6

Your invalid certificate authority error is due to the fact that CloudFlare issued it, not because of how you were routing traffic. This is because you used a type of certificate meant only to secure communication between your origin server and CloudFlare's network. It is issued via what they call their "Origin Certificate Authority" explained here. When ...


6

It's really to do with when the redirect occurs. WordPress/PHP naturally occurs later than .htaccess, so the HTTP request has already passed to PHP before the redirect occurs. .htaccess is processed at the very start of the request, before it is passed to PHP. However, if you are using CloudFlare then you should create a page rule to redirect HTTP to ...


5

Just to add a little more clarity: There's a pretty good article on Quora about how CloudFlare works. Which site resources are affected? Only static ones? What CloudFlare caches by default. "Does CloudFlare act as a cache proxy? Say, I have a bunch of images on the pages of my site. Does CloudFlare cache all those images on each of their data centers and ...


5

The short answer is that Cloudflare is safe. Cloudflare is essentially nothing more than a content delivery network (CDN). The theory behind it is that they will cache copies of your website to their servers, which are spread across different locations. When a visitor visits your site the server that is closest to them is chosen and the connection has less ...


5

Use development mode. You can also manually purge the cache.


5

It sounds like you are trying to update your nameserver records through your DNS host. If you need to modify an A record or a CNAME record, you would want to do so through your DNS host. However, name server records are not modified with your DNS host. Cloudflare is asking to be your DNS host. You need to set the nameserver records through your domain ...


5

CloudFlare don't allow this in their Terms of Use. I received the following email from CloudFlare when I attempted this on an image-only subdomain once: Also note here -- you seem to only be using CloudFlare for this products.xyzmedia.co.uk subdomain. We do not permit CloudFlare to be used only for static file delivery. You will need to have xyzmedia.co....


5

I found the answer here: https://support.cloudflare.com/hc/en-us/articles/200170566-Why-isn-t-SSL-working-for-my-site- Your domain/sub-domain is not active on Cloudflare’s network Cloudflare’s SSL will only be present for visitors to your website after you have validated the SSL certificates to your root or www DNS record by orange clouding these ...


4

CloudFlare acknowledge this and provide the following explanation: CloudFlare Analytics vs. Other Services Google Analytics and other web-based analytics programs track visitors that trigger JavaScript. As a result, threats, bots and automated crawlers are not recorded since these visitors typically do not trigger JavaScript. These services ...


4

I have observed similar differences when comparing Apache logs with analytics and have seen a (one day) ratio of 1000:1. It is remotely possible that you have some userbase that blocks Google-Analytics with products like NoScript and Ghostery, or doesn't run any javascript at all. I have found that Piwik gives better reports and can be setup such that ...


4

Okay there are a few ways to skin this so to speak. First get the IP of your new server. Run a ping using a tool like Just Ping. There you can see your global ping times. This will give you an idea on how long it takes to connect to your server from large cities around the world. Ten for more information you'll want to use something like Pingdom Tools to get ...


4

No, there is no way to turn the cookie off if we are proxying the record (if you had a subdomain not running through our proxy in your DNS settings, then we wouldn't add the cookie because it is going direct to your server). The cookie is basically what makes security (like a challenge page) work.


4

What is the problem with this cookie? You are using their service and want to benefit from their service and their security – according to Cloudflare, this cookie helps especially for security reasons. Regardless of that, this type of cookie is exempt from the cookie law message: However, some cookies are exempt from this requirement. Consent is not ...


4

You need to understand what a CDN is. CDN means Content Delivery Network, rephrazed; a network to deliver your content. Indeed, CloudFlare can't speed up your PHP scripts or MySQL queries. CloudFlare will host your static resources (images, videos, JS and CSS files, etc.) on many servers over the world to permit to all your visitors to download them faster (...


4

There are a few smart ways, so in theory it is sometimes possible, but only with a bad admin configuration. In practice it's about impossible. For example, try getting the IP address of a site's DNS records like: cpanel.domain, webmail.domain, etc... Maybe they'll point to the real IP address if they're not proxied through CloudFlare. CloudFlare wasn't ...


4

We can actually manage the DNS for the record pointing to Tumblr. You can't, however, have our proxy (orange cloud) turned on for the record & it should be grey (direct).


4

As covered here, create a Page Rule for URLs containing the wp-admin and wp-login directories to prevent CloudFlare from caching them. Also, disable Rocket Loader, as it may inadvertently break certain functions (editors, etc.) in your WordPress back end. Also try changing these other settings in your CloudFlare account under Performance Settings: ...


4

The short way to do this is using the API. A short script in your preferred language will do the trick. https://api.cloudflare.com/#dns-records-for-a-zone-update-dns-record


4

(Answer added for @Festus Martingale to mark question as answered). Replacing the ? with a # solved the problem as it prevents the query string from being transmitted to cloudflare as it appears as a hash fragment.


Only top voted, non community-wiki answers of a minimum length are eligible