How can you set Cloudflare's settings for WordPress

How?

If properly configured, all request that is made to your website will go through a Cloudflare server. The server is able to decide which request needs to be directed to the server which was the source of it and served through the cache or block or handled using custom rules.

DNS vs Cloudflare DNS

For performance as well as the uptime and performance, Cloudflare DNS and DNS perform very similar both with respect to speed as well as uptime and both are excellent providers. The main difference between the two options is the extra security that Cloudflare offers as well as its speed. DNS is only a DNS solution. However, Cloudflare provides DNS and another proxy layer which acts in the role of a firewall CDN and more.

How do you configure Cloudflare's settings for WordPress

Cloudflare gives you a variety of security and performance advantages. However, it's not completely adaptable to WordPress. Let's look in depth into the options of Cloudflare to determine the most efficient solutions you can use on your WordPress site.

SSL

Cloudflare provides four modes for encryption using SSL/TLS: Full, Off Flexible and Full (Strict).

• Off - No encryption.
• Flexible is only used to secure the communications between your web browser as well as Cloudflare.
• Complete End-to-end encryption that allows the use of a self-signed certificate for the server of origin.
• Ful (Strict) • End-to end encryption that needs an unpaid origin certificate issued by Cloudflare or an official certificate from an accredited CA (certificate authoritative). We advise using SSL using full (Strict) SSL mode to ensure maximum security.

You can, however, make a Cloudflare origin certificate, and then install it on your origin server. If your host does not have free SSL certificates and you wish to install an Cloudflare origin certificate, it will permit you to utilize the full (Strict) SSL mode.

This option lets you utilize Cloudflare's Flexible SSL, while making sure that you are using Cloudflare Full (Strict) SSL on subdomains managed by the .

Make sure you are using HTTPS.

The HSTS

Minimum TLS Version

Automatic Rewrites of HTTPS

Speed

The majority of Cloudflare services are targeted toward efficiency, such as the optimization of images and minimized asset usage is offered in"Speed" "Speed" section.

Image Resize (Business Only)

The Cloudflare feature that allows images to be resized is achieved by adding an end point on your images. Check out the following example to understand how it works.

     Original Image URL    

https://yourdomain.com/wp-content/uploads/2020/01/picture.jpg

     Dimensioned Image URL    

https://yourdomain.com/cdn-cgi/image/fit=contain,format=auto,metadata=none,onerror=redirect,quality=70,width=720/https://yourdomain.com/wp-content/uploads/2020/01/picture.jpg

Its "width" parameter is able be altered to generate various sizes of thumbnails in real-time without the need for additional resources on your server which is where the data comes from. If you're looking for an alternative solution that's equivalent to Cloudflare's scaling of images, Imgix and Cloudinary are excellent options.

Polish (Pro Only)

Auto Minify

Brotli

Improvement in Prioritization for the HTTP/2 (Pro Only)

Mirage (Pro Only)

Mirage can also make multiple image requests in one request, which could reduce the amount of roundtrips necessary for your site to be fully loaded. If your website utilizes a variety of images that are geared towards a large mobile audience, Cloudflare Mirage can have positive effects on the efficiency of your site.

Rocket Loader

Caching

Caching Level

It is suggested to maintain the caching level at "Standard" this allows the latest versions of the assets to be accessible by a particular query string.

The expiration date of Browser Cache

Firewall

Do you want to know how we increased the amount of traffic we receive by 1000 ?

Join the more than 20,000 subscribers to our newsletter each week. It's packed with helpful tricks and WordPress information!

Most WordPress websites, the level of security offered by Cloudflare's program for free is sufficient for the demands of. If you're operating the site for a business and require additional security, Cloudflare's Pro-level WAF as well as the controlled rulesets aid in protecting your site's security even more.

Network

Secure HTTP/3 connections are benefited by an enhanced handshake routine and results in lower connections, and faster times. When HTTP/3 is enabled in the dashboard of the Cloudflare dashboard, users that are eligible can make use of HTTP/3 for connecting to Cloudflare servers.

In addition, Cloudflare's Zero-RTT Connection Resumption feature improves loading speeds for visitors who have previously had a connection to your site.

Page Rules

This rule matches URLs beginning with www.brianonwp.com. Note the addition of the asterisk symbol that allows you to create matches by using wildcards. Think of the asterisk as "anything that is there". Under the URL pattern, you can see this page rule is configured to 301 redirect all matching requests to https://brianonwp.com/$1, where "$1" refers to the "first wildcard" in the matching pattern.

With a page rule like this one, requests to www.brianli.com/specific-page/ will be redirected to brianli.com/specific-page/.

In the case of a Cloudflare rules-based pages, you are able to apply specific parameters to any URL with a match. Take a look at the settings are available for using page rules. Some settings are even able be combined into one page rule!

• Always Online - switch on cloudflare's "Always Online" feature which provides static HTML pages when the server used to create these pages is offline.
• Always use HTTPS to ensure HTTPS is mandatory on compatible URLs.
• Auto Minify Auto Minimize HTML0 - switch off or enable CSS, HTML and minification of JS.
• automated HTTPS Rewrites allow the rewriting of HTTP URLs into HTTPS versions.
• The browser Cache TTL determine the TTL for the browser cache for URLs that are compatible. This means that you could configure various TTLs for the cache of your browser for various types of documents.
• browser Integrity Check Browser Integrity Testing switch off or switch on Cloudflare's "Browser Integrity Check" feature which analyzes HTTP headers in order to find spammers or other harmful traffic.
• Cache Deception Armor - turn on or off Cloudflare's "Cache Deception Armor" feature that protects against cyber-attacks on internet caches by checking that an asset's file extension is compatible with what is called the "Content-Type".
• Cache Level Cache Level HTML0 Set the cache level to allow usage of URLs which match.
• Disable apps - Disable Cloudflare applications to make sure they match URLs.
• Disable Performance: Disable any performance-related features when URLs share the same format.
• Disable Railgun - disable Railgun for matching URLs.
• Enable Security to disable security settings for websites that use HTML0.
• Edge Cache TTL define the TTL of an edge cache (the length of time that the assets will be kept in the Cloudflare edge network).
• Obfuscation of Email enable or disable Cloudflare's script for email obfuscation which reduces the effectiveness of bots crawling through the mess of emails.
• Forwarding URL create a redirect 302 or 301 redirect for redirecting to a different URL.
• Header IP Geolocation Header switch off or on Cloudflare's IP geolocation HTTP header.
• Opportunistic Encryption allows clients to access HTTP URLs using a secure TLS channel.
• Cache Control  Cache Control Cache Control for HTML0- indicate how you would like Cloudflare to deal with the servers "Cache-Control" instructions.
• Rocket Loader The user is able to switch off or disable Rocket Loader when URLs are the same sequence.
• Security Level show the amount of security which is in line with URLs.
• Server Side Exclusions toggle on or off Cloudflare's "Server Side Excludes" feature, which lets you to block private data from harmful web traffic through embedding HTML into

Article was posted on here

This post was first seen on here