Setting up Cloudflare

Technical Assignment: Connecting and Configuring Cloudflare (Free Version)

1. Objective

Integrate the website with Cloudflare to improve speed, protection, and security without paid features and considering SEO.

2. Main Tasks

2.1. Connecting to Cloudflare

1. Register or log in to a Cloudflare account.
2. Add the website to Cloudflare.
3. Change the DNS servers at the domain name registrar to Cloudflare DNS.
4. Ensure that all current DNS records (A, CNAME, MX, TXT, etc.) are transferred correctly.

2.2. SSL and HTTPS

1. Enable and configure free SSL from Cloudflare:

   • Use Flexible SSL or Full SSL mode, depending on whether the server supports SSL.
   • Enable automatic redirection from HTTP to HTTPS.
   • Check for any "mixed content" errors on the site.

2. Ensure that all pages of the site load correctly over HTTPS and all resources (CSS, JS, images) are accessible.

2.3. Caching Settings

1. Enable caching of static content (CSS, JS, images) through Cloudflare.
2. Exclude the following pages from caching:
   • Pages with dynamic content (login, registration, cart, personal account).
   • Pages with the noindex tag to avoid indexing issues.
3. Enable automatic cache clearing when the site is updated (if applicable).

2.4. DDoS and Bot Attack Protection

1. Enable basic DDoS protection (Cloudflare enables it by default).
2. Configure basic protection against bots and malicious traffic through Cloudflare, using standard protection settings (Security Level: Medium).
3. Ensure that the protection does not interfere with access for real users and search engine bots.

2.5. Setting Up Page Rules

1. Create Page Rules for:

   • Caching the homepage and static content.
   • Disabling caching on pages with dynamic content.
   • Ensuring redirection from HTTP to HTTPS (if required).

2. Limit to 3 Page Rules, as the free version of Cloudflare provides only 3 rules.

2.6. Performance Optimization

1. Enable support for HTTP/2 and HTTP/3.
2. Activate Auto Minify for automatic compression of HTML, CSS, and JavaScript.
3. Disable image compression features (Polish) and resource prioritization (Railgun), as they are not available in the free version.

2.7. IP Address Forwarding

1. Configure the server (Apache/Nginx) for correct forwarding of real user IP addresses through the X-Forwarded-For header.
2. Ensure that analytics systems (e.g., Google Analytics) correctly account for real user IP addresses.

2.8. Indexing and SEO Check

1. Ensure that robots.txt and canonical URLs are correctly configured and do not block important pages from indexing.
2. Check that pages with the noindex attribute are not cached.
3. Recheck the site settings in Google Search Console after connecting Cloudflare.

3. Result

1. The site operates through Cloudflare with HTTPS and accelerated content delivery.
2. Static files (CSS, JS, images) are loaded via CDN.
3. Dynamic pages are not cached, and search correctly indexes the pages.
4. Real user IP addresses are forwarded to the server.
5. Improved site loading speed and basic protection against DDoS and bots are provided.