Cloudflare CDN for MyListing Websites

Get the knowledge your online business needs to succeed.

Overview

The Cloudflare CDN for MyListing Websites guide will show you how to easily configure the solution according to best practice.

We use Cloudflare for almost every site we implement, in order to take advantage of the additional performance, security, reliability, and analytics it provides.

Cloudflare Initial Setup
Cloudflare Optimization
Verify Cloudflare Caching
Cache Maintenance
Grant Team Access

Cloudflare Initial Setup

  1. Sign up for a Cloudflare account.
  2. Enter your domain name in the Site field and click Add site.
  3. Click Next, choose the free plan, click Confirm plan, and click Confirm.
  4. After the scan completes, click Continue.
  5. Open a new browser tab and log into your current DNS hosting account.
  6. Edit your DNS settings for the same domain you’re currently adding to Cloudflare.
  7. Compare the discovered DNS records on the Cloudflare side, to the DNS records on the DNS Hosting account side.
  8. Add any missing DNS records on the Cloudflare side or just click Continue.
  9. On the current DNS Hosting account side, change the Nameservers to match what Cloudflare provides, and click Continue. (Note: Although it rarely does, it may take up to 24 hours for the DNS to propagate across the web. Once DNS has fully-propagated, Cloudflare will show Status: Active. Proceed on once the propagation has completed.).
  10. Cloudflare > Overview > Advanced Actions > Pause  Cloudflare on Site (Note: With the website still in development, we want to keep the optimization portion of Cloudflare turned OFF.).
  11. Cloudflare > DNS > Change the A records so that they point to your website’s server IP address.
  12. Cloudflare > SSL/TLS > Change the encryption level to Full (Note: When you go to implement a non-custom SSL certificate like the free Let’s Encrypt certificate, Full is the appropriate Crypto choice, compared to say Full Strict. This is because Full Strict has an additional handshake that’s not required.).

Cloudflare Optimization

We currently use the settings below, but we’re constantly testing for the best optimization, so please check back in every now and then to get the latest setting recommendations.

If a setting is not specifically mentioned, assume we are just using the defaults.

SSL/TLS

  • Edge Certificates > Always use HTTPS: On
  • Edge Certificates > HTTP Strict Transport Security (HSTS): Enabled/Configured
    • Status: On
    • Max-Age: 6 months (Recommended)
    • Include subdomains: On
    • Preload: On
  • Edge Certificates > Automatic HTTPS Rewrites: On (Note: You may already have this enabled in your .htaccess file. We found a slightly better performance increase when using Cloudflare to rewrite HTTPS. In the end, just make sure not to duplicate rewriting.)

Page Rules

Cloudflare’s Free tier allows for up to 3 page rules, which can be used to further secure and/or optimize your website.

Please note that a common mistake website owners make is to create a Page Rule to cache what Cloudflare already caches by default.  Here are the page rules we currently use for this tier.

Page Rule 1

We are telling Cloudflare to avoid caching for the /wp-admin/ area, as well as /wp-login.php and /wp-json.php. (Note: Folders like  /wp-uploads/ will still be cached by Cloudflare…automatically.).

Page Rule 2

We are telling Cloudflare to avoid caching for all of the WooCommerce endpoints.

Page Rule 3

We are telling Cloudflare to cache everything, including the website’s static HTML. 

Typically, the cache everything rule is not recommended for websites where people are required to log in, but we are counteracting this with Page Rule 2.

Scrape Shield

  • Email Address Obfuscation: Enabled
  • Server-side Excludes: Enabled
  • Hotlink Protection: Enabled

Verify Cloudflare Caching

  1. Follow the GTmetrix section of our Optimize MyListing Websites for Outstanding Performance guide.
  2. When the results come back, click on the Waterfall tab.
  3. Expand the first item on the list which should be your domain name.
  4. Click on the Response tab.

If Cloudflare is caching a particular asset, you will see a result of CF-Cache-Status: HIT.

Note: For more information about the various Cloudflare caching codes (e.g. HIT, MISS, EXPIRED, etc.), view their support article on this topic.

Cloudflare Cache Maintenance

As website professionals push out new content (copy, design, etc.) it’s important to ensure customers and users are being served the correct (current) content.

Manual Maintenance

If you’re someone who runs a really tight ship, there is a manual process for clearing Cloudflare’s cache.

The manual option is good for keeping plugins to a minimum, while also ensuring the cache is absolutely getting cleared. 

To clear Cloudflare’s cache, you have the option to clear the cache for a specific URL or for your entire website.

We recommend clearing the cache for a specific URL,  in order to keep your overall cache in untouched.

  1. Cloudflare > Caching > Custom Purge.
  2. Enter the URLs you which to purge, using the simple instructions that Cloudflare provides.
  3. Click Purge.

While the process to manually clear Cloudf’lare’s cache is simple, it is also easily forgotten, and that’s where the automated options come into play.

Automated Maintenance

To automate the Cloudflare cache-clearing process, we recommend WP Rocket, due to its overall ability to performance-optimize a website.

If using a no-cost solution is desired, you can use Cloudflare’s proprietary plugin.

Cloudflare Cache Management with the WP Rocket plugin

  1. Install and activate WP Rocket.
  2. Settings > WP Rocket > Add-Ons > Toggle on the Cloudflare add-on.
  3. Click Modify Options.
  4. Log into your Cloudflare account.
  5. Using your Cloudflare account, fill in the Global API Key, Account Email, and Zone ID.
  6. Save changes.

Cloudflare's Proprietary Plugin

  1. Install and activate the Cloudflare plugin.
  2. Settings > Cloudflare > Click the Sign in link.
  3. Add your Cloudflare email and API Key.
  4. Click Save API Credentials.
  5. Automatic Cache Management > Toggle on.
  6. Click I’m Sure.

Grant Team Access

Cloudflare offers an easy way to grant access to your in-house team, consultants, etc. The steps below walk you through granting team access.
  1. Log into Cloudflare.
  2. Click Members from the top menu.
  3. Enter the email address of the person you would like to invite.
  4. Click Invite.

Let's empower others. Share the knowledge.

Share on twitter
Twitter
Share on facebook
Facebook
Share on linkedin
LinkedIn
Scroll to Top

Find a bug or typo? Please let us know.