Cloudflare Content Delivery Network
Cloudflare Content Delivery Network configuration is very much critical. For any wrong configuration website will not work properly. Please contact me for CDN solutions
1. Cloudflare Content Delivery Network Plan
There are 4 CDN packages offered by Cloudflare which is listed below
- Features (Free Plan with $0/m)
- Features (Pro Plan with $20/m)
- Features (Business Plan with $200/m)
- 1.4. Features (Enterprise Plan Custom Price)
1.1. Features (Free Plan with $0)
- Fast, easy to use DNS
- Free automated SSL certificates
- Global content delivery network (CDN)
- Unlimited mitigation of DDoS attacks with up to 67 Tbps capacity
- Up to 100k Workers requests and 30 scripts
- 3 Page Rules
1.2. Features (Pro Plan with $20)
- Everything included in free, plus…
- Up to 100k Workers requests & 30 scripts
- 20 Page Rules
- Enhanced security -Web Application Firewall (WAF)
- Bot report and basic mitigation
- DDoS Alerts
- Want to learn mo
- Lossless image optimization
- Accelerated mobile page load speed
- Privacy first analytics
1.3. Features (Business Plan with $200)
- Everything included in Pro, plus…
- Web application firewall (WAF)
- SSL/TLS 1.2 and 1.3 with shared or single custom upload
- Bot analytics and advanced mitigation
- 50 Page Rules
- Minimum edge cache expire TTL at 30 minutes
- Analytics time-range at 15 minute scope
- Prioritized customer support: 24 x 7x 365 by chat and email
- 100% uptime SLA
- Waiting Room traffic regulation
1.4. Features (Enterprise Plan Custom Price)
- SSL/TLS 1.2 & 1.3 with shared or multiple custom upload
- 125 page rules
- Minimum edge cache expire TTL at 30 seconds or less
- Audit logs and Enterprise Raw Logs with destination integrations
- Analytics time-range at 1 minute scope
- Prioritized customer support: 24x7x365 by phone, chat, and email support
- 100% uptime SLA up to 25x reimbursemen
- Role-based account control
- Single Sign On support
- Network prioritization
- Enterprise Bot Management*
- Layer 3 Network DDoS protection with Magic Transit*
- Spectrum (for TCP / UDP)*
- SS L/ TLS for SaaS*
- China Network access*
At fist you need to signup in cloudflare.com.
2. How to Add your site
- Review your DNS records
- Change your nameservers
- Configure your domain settings
3. Cloudeflare Configuration
3. Add Subdomain
4. Email Configuration
2. Add your site
At first Add your site
Then select free option
Then click Continue
2.1. Review your DNS records
Please make sure A record is pointing to 184.108.40.206 at CloudFlare.
2.2. Change your nameservers
2.3. Configure your domain settings
Configure your domain settings to improve security, optimize performance, and get the most from your account.
3. Cloudeflare Configuration
It is summery of all settings
Question: I am using business plan for www.xyz.com. We have one more subdomain named www.shop.xyz.com. My first question: Will free plan of your CDN works in subdomain (www.shop.xyz.com)? My second question: Will all features of our existing business plan (CDN) will inherited into www.shop.xyz.com? Answer: Yes, your plan covers. Your subdomains will be on the same plan as your root domain
Tickets: On your Cloudflare dashboard: >>1.View open support tickets >> 2.Log in to your Cloudflare account. >>3.Select Help Center from Support dropdown. >>4.Click Sign In if it appears in the top-right corner; otherwise, click on your name or profile picture. >> 5.Click My Activities & Requests. support.cloudflare.com/hc/en-us/articles/200172476-Contacting-Cloudflare-Support
There are some analytics information can see under below 5 sub menus. Nothing to configure here
DNS management : Some of your DNS only records are exposing IPs that are proxied through Cloudflare. Make sure to proxy all A, AAAA, and CNAME records pointing to proxied records to avoid exposing your origin IP. You can change IP also here.
View Cloudflare nameservers: Will show your assigned Cloudflare nameservers.
Custom Nameservers: You can set custom nameserver from here
DNSSEC: Option to Enable DNSSEC (Default)
CNAME Flattening: Chose any option > Flatten CNAME at root (Default) or Flatten all CNAMEs
Setup your SSL from here in below submenus
- Edge Certificates
- Client Certificates
- Origin Server
- Custom Hostname
In SSL/TLS tab of business plan which SSL/TLS encryption mode should select? Off/Flexible/Full (Default) / Full Strict. Part 1: SSL certificates support.cloudflare.com/hc/en-us/articles/360024787372-End-to-end-HTTPS-with-Cloudflare- . Part 2: SSL certificates support.cloudflare.com/hc/en-us/articles/203295200-End-to-end-HTTPS-with- Part 3: SSL options support.cloudflare.com/hc/en-us/articles/200170416-End-to-end-HTTPS-with-Cloudflare-Part-3-SSL-optionsCloudflare-Part-2-SSL-certificates. Make sure to choose ‘Full’ if you are already using SSL.
Question: In SSL/TLS tab, SSL/TLS Recommender value should be On(Default)/Off? Answer: I can’t advised to keep this off or on. it will depends in your circustances
Question: Is you SSL certificate is good. How many types of SSL certificate you have? What is the difference between Free and Business plan SSL?
3.4.2. Edge Certificates
Manage & purchase SSL certificates that will be served to your web visitors. Your plan includes a shared Cloudflare called Universal SSL certificate. To get a dedicated certificate purchase from us with custom hostnames
3.4.3. Client Certificates
Secure & authenticate your APIs and web applications with client certificates. Block traffic from devices that do not have a valid client SSL/TLS certificate with mTLS rules.
3.4.4. Origin Certificates
Generate a free TLS certificate by Cloudflare to install on your origin server. Origin Certificates are only valid for encryption between Cloudflare & your origin server.
Manage the hostnames & SSL certificates for third parties that CNAME to your domain.
- Managed Rules
- Firewall Rules
It will show overall report of firewall. e.g. block, Challenge, Events by service,
3.5.2. Managed Rules
Web Application Firewall: On/Off (Default) >> Provides enhanced security through a built-in ruleset to stop a wide range of application attacks. support.cloudflare.com/hc/en-us/articles/200172016-Understanding-the-Cloudflare-Web-Application-Firewall-WAF-
Question: In Firewall Tab, should I On Web Application Firewall. Answer: It will totally depends on your circumstances. We higly recommend having this configured as it adds a extra security layer to your website. I can only say that enabling Cloudflare WAF can prevent a large amount of possible attacks on your site. Please bare in mind that you could see false positives (legitimate traffic being blocked due the WAF sensitivity)
3.5.3. Firewall Rules
Firewall Rules: Control incoming traffic to your zone by filtering requests and based on location, IP , user agent, URI, and more.
Question. In Firewall Tab, where can I find rules docs?
Here you can configure Bots Analytics, Bot Management for Enterprise, Requests by detection source etc
Rate Limiting: Enable Rate Limiting Button >> Protect your site or API from malicious traffic by blocking client IP addresses that hit a URL pattern and exceed a threshold you define.
User Agent Blocking: Create Blocking Rule Button >> Create a rule to block or challenge a specific User Agent from accessing your zone.
Zone Lockdown: Create Lockdown Rule Button >> Lock down a specific URL on zone to specific IP addresses. This is useful for protect an admin or protected area from non-specified IP addresses.
- Control user access to applications
- Simplify contractor onboarding & offboarding
- Audit user login and activity
Cloudflare Access: Enable Access Button. With Access, you can secure access to internal applications without a VPN.
Question: In Access tab should I Enable Access?
- Browser Insight
Result: Visitors to your website see content in 1.4 seconds on Cloudflare. That’s 61% faster!
Automatic Platform Optimization: Install this plugin to your website to effect
- First Contentful Paint :3.2 s
- First Contentful Paint with Automatic Platform Optimization : 1.3 s
|Critical Loading Times||Mobile||Desktop|
|Time to First Byte||3.1s||0.3s|
|First Contentful Paint||6.1s||1.6s|
|First Meaningful Paint||6.1s||2.7s|
|First Interactive||No data||No data|
|Total Load time||28.4s||11.7s|
Image Resizing: On/OF > You can resize, adjust quality, and convert images to WebP format. This allows you to adapt images to your site’s layout and your visitors’ screen sizes, quickly and easily, without maintaining a server-side image processing pipeline. developers.cloudflare.com/images
Question: Should I on image Resizing in Optimization Tab? Ans. You are the Business plan, so you will be allowed to enable it. If you require WebP images/format, you can enable it.
Polish: Lossless / Off / Lossy >>Select Lossless for Improve image load time by optimizing images hosted on your domain. Polish optimizes resources cached in the Cloudflare edge network, not on your origin. WebP images are all stored on our network in our cache.. support.cloudflare.com/hc/en-us/articles/360000607372-Using-Cloudflare-Polish-to-compress-images#12345686
Question: In polish section should I check WebP?
Answer. If you require WebP images/format, you can enable it. As far as I am aware, it should not affect anything. As the document above states: `WebP is a modern image format providing superior lossless and lossy compression for images.>> We also recommend you turn ON Polish, which helps with image compression
Automatic Platform Optimization for WordPress: Install this plugin. APO increases the cache ratio for your site at the Cloudflare Edge. Improve the performance of your WordPress site. Automatic Platform Optimization for WordPress serves your WordPress site from Cloudflare’s edge network and caches third party fonts. Get the benefits of a static site without any changes to how you manage your site. This results in consistent, fast TTFB and content loading faster.
Question: Should I check Cache By Device Type?
Enhanced HTTP/2 Prioritization: On / Off (Default) >> Optimizes the order of resource delivery, independent of the browser. Greatest improvements will be experienced by visitors using Safari and Edge browsers.
Question. In Speed Optimization Tab, should I keep On/Off for Enhanced HTTP/2 Prioritization
Answer: Of course, so enhanced HTTP2 Prioritization – what it does is that it will put an order of requests that loads the website faster. We definitely recommend it to be ON unless your website is not compatible
We always suggest customers test to see everything is working well, and only then decide to keep it on.
TCP Turbo: Enabled >> Reduce latency and throughput with custom-tuned TCP optimization
Mirage: On / Off >>Improve load time for pages that include images on mobile devices with slow network connections.
Answer: I see. We do recommend that you try to turn Rocket Loader on and see if it helps. In terms of page speed, sometimes it depends a lot on how your website is programmed, these optimizations will help, but are only part of the solution.
Question: In Speed Optimization Tab, should I keep On/Off for Rocket Loader™
Railgun™: Railgun Setting. >> Accelerate delivery of dynamic content. Note: Requires software installation at your host.
Prefetch URLs: Cloudflare will prefetch any URLs included in the prefetch HTTP header
AMP Real URL: On/Off (Default)>> Display your site’s actual URL on your AMP pages, instead of the traditional Google AMP cache URL. AMP Real URL is especially useful to customers with AMP traffic from primary search results like e-commerce, job boards, and ad-supported sites. If this is your use case. support.cloudflare.com/hc/en-us/articles/360029367652-Understanding-Amp-Real-URL
Question: Should I on AMP Real URL ? Ans. You can certainly enable it.
Mobile Redirect: Select a Subdomain >> Redirect visitors that are using mobile devices to a mobile-optimized website.
3.7.3. Browser Insight
Core Web Vital: Show your reports and fix of Largest Contentful Paint, First Input Delay, Cumulative Layout Shift etc
Page Metrics: Show page load time e.g. Total: 591ms, DNS: 46ms, TCP: 194ms, Request: 6ms, Response: 288ms, Processing: 40ms
Configurations: On/Off (Default) >> Measure your website’s performance by On and load time for your users.
- Tiered Cache
IT will show Cache Performance reports
3.8.2. Tiered Cache
Enabling Tiered Caching: Argo is a product that uses optimized routes across Cloudflare 200+ data centers to deliver responses to your users more quickly, reliably, and securely.
Purge Cache: Custom Purge / Purge Everything >> Clear cached files
Caching Level : No query string / Ignore query string / Standard (Default)
Browser Cache TTL: 30M/ 1H/ 2H/ 3H/ 4H(Defautl)>>Determine the length of time Cloudflare instructs a visitor’s browser to cache files. During this period, the browser loads the files from its local cache, speeding up page loads.
CSAM Scanning Tool: Set email address
Always Online : On/ Off
Question: Should we click on Update Button?
Development Mode: On / Off (Default) >> Enabling this feature can significantly increase origin server load.
Enable Query String Sort : For enterprise plan
Workers KV: Store application data in the Cloudflare network and access your key-value pairs from Workers. developers.cloudflare.com/workers
Question. In Workers tab, how to Manage Worker? How it effect a website?
Answer: So, workers are a program that you code and it runs on our cloudflare edge servers. You can do endless things with Workers, you can program different behaviors for your website with it.
There are tow submenu under this menu
- Pages Rules
- Transform Rules
3.10.1. Page Rules
It is especially useful in securing critical pages like login page, wp-admin area, etc. To implement click on button Create Page Rules
(1) Page Rules : To secure wordpress login page
Setting: Security Level; High
(2) Page Rules : Exclude WordPress Dashboard from Cloudflare and Enable High Security
Now click Add a setting to create new Page Rules
Page URL: domain.com/wp-admin*
Settings: Security Level; High
Cache Level; Bypass
(3) Page Rules: To Force HTTPS
Setting: Always use HTTPS
Question. In Rules tab, where can I find rules docs?
Understanding and Configuring Cloudflare Page Rules (Page Rules Tutorial) support.cloudflare.com/hc/en-us/articles/218411427-Understanding-and-Configuring-Cloudflare-Page-Rules-Page-Rules-Tutorial-
Recommended Page Rules to Consider support.cloudflare.com/hc/en-us/articles/224509547-Recommended-Page-Rules-to-Consider
3.10.2. Transform Rules
Transform Rules: Use Transform Rules to transform your traffic. This includes URL Normalization, URL Rewrites, and Header Modifications
HTTP/2: On / Off (Default) >> Set On
HTTP/3: On / Off (Default) >> Set On
Question: Should I on HTTP/2 or HTTP/3?
0-RTT Connection Resumption: On / Off >> Improves performance for clients who have previously connected to your website.
Question: Should I on it
gRPC: On/ Off (Default)
WebSockets : On (Default) / Off
Onion 3outing: On (Default) / Off
Pseudo IPv4 : Off
IP Geolocation: On (Default) / Off
Maximum Upload Size : 100Mb (Default)
Argo: Enable Agro >>Argo is a service that uses optimized routes across the Cloudflare network to deliver responses to your users more quickly, reliably, and securely. Argo increases the routing speed of a request after it reaches the Cloudflare Edge > cloudflare.com/products/argo-smart-routing , support.cloudflare.com/hc/en-us/articles/115000224552-Configuring-Argo-through-the-UI
Question: Should I Enable Agro?
Answer. You could enable Argo. It is payment system
4. Add Subdomain
Question: If I use subdomain, which record type I need to add, A record/ CNAME?
Answer: That depends on the configuration of your hosting provider. For example, if they provide a IP, you need to use a A record. If they provide a domain, you likely need to CNAME to it
Question: In DNS tab, there are few A records showing, but in free version I found a lot of A Record and CNAME. Can you explain me this issue?
Answer: So, every website can have a different configuration. It does not depend on your plan.
5. Email Configuration
Question: Generally I received mail according to configuration of cPanel. But after adding your CDN network, I get email in webmail but I can not download email through outlook. Are there any different configurations under CDN network to download mail in outlook?You can see below our hosting email configuration information
Questions: How can I get support from cloudflare?
1.View open support tickets >> 2.Log in to your Cloudflare account. >> 3.Select Help Center from Support dropdown.
4.Click Sign In if it appears in the top-right corner; otherwise, click on your name or profile picture.
Once logged in click on the ‘Add Website’ button, it will go to Select a plan page. Select ‘Basic $0’ It will then go to the Quick Scan page and then it will redirect to Review your DNS records.
Can you please let me know which subdomain are you referring to ?
Actually it is same process for all the domains and subdomain, since you are adding the CloudFlare CDN from CloudFlare side so to confirm on CloudFlare CDN on the subdomain you can contcat and check once with CloudFlare support
Question: How to activate CDN? Should it configure by me. Or it is configured automatically. How can I ensure / check it from my end
Answer: Could you please provide the Domain name in which you want to activate the CDN ? I see that the CDN is not activated for autogarment.com The A record of autogarment.com pointing to Bluehost server IP 220.127.116.11
Check : https://www.whatsmydns.net/#A/autogarment.com
If you want to activate the CDN, you can login here :
Enter the Email address, check the option (I have read and agree to abide by CloudFlare’s Terms of Service) and click on the Next button.
Clicked on Next should i do any other thing 3:46 pmSA email will sent to the email address entered with subject line as: [Cloudflare]: Welcome to Cloudflare, in partnership with Bluehost. They will email a password reset link. Once password is reset login at:
Once logged in click on the ‘Add Website’ button, it will go to Select a plan page. Select ‘Basic $0’.
Rest code: d97af5c16d24c848eb8e465f5f6924351bbab7453a9ef0e2636b72ccba7
It will then go to the Quick Scan page and then it will redirect to Review your DNS records. And Propagation time can vary depending on the geographical location. Nameserver changes can typically take 0 to 24 hours to take effect, but they are known to take as long as 48 hours to go into full effect.
Hotlink Protection prevents your images from being used by other sites. Hotlink protection has no impact on crawling, but it will prevent the images from being displayed on sites such as Google images, Pinterest, etc.
Question: May I know which plan of CDN is suitable for ecommerce site built with WordPress
Answer: If you order a plus or higher plan, it comes with Jetpack Professional, which is a CDN andI usually recommend using one CDN as each CDN functions differently (drh)
Copy below url and paste it into browser
|Cloudflare Setup & Configuration Free (With Plugin)||youtube.com/watch?v=C5_uK44XSqY|
|Cloudflare Setup & Configuration Free (Hindi)||youtube.com/watch?v=3wZKTgEYODM|
|Cloudflare Firewall Setup||youtube.com/watch?v=GY25yOiM2m4|
|Add Subdomain in Cloudflare||youtube.com/watch?v=70P_w_T6Yvg|
|Payment failure in Cloudflare||support.cloudflare.com/hc/en-us/articles/218344877-Troubleshooting-failed-payments#gq3i7QxxnQvWr8S7TiPgQ|
|Change Plan Type in Cloudflare||support.cloudflare.com/hc/en-us/articles/360033922371-Changing-your-Cloudflare-plan-type?source=search|