Domains, DNS and SSL1 min readUpdated

Using Cloudflare in front of your server

The DNS records, SSL mode and cache settings that work with ShopWhizzy, and what the server sees.

Cloudflare works well in front of a Gen2 server. The server already knows Cloudflare's addresses and reads the visitor's real IP address, so limits, blocks and logs keep working per visitor.

  1. DNS

    Create the A records for @ and www with the server's IPv4 address. Proxy (orange cloud) can be on.

  2. SSL/TLS modeFull (strict). Never Flexible: it causes redirect loops and sends traffic unencrypted to the server.
  3. Always Use HTTPS

    On.

  4. Caching

    Leave HTML to the server (Varnish or Magento's page cache). Let Cloudflare cache images, CSS and JavaScript.

  5. Under Attack mode

    Only during a real attack; the server's own browser check usually handles bot waves without bothering customers.

If you restrict access to the server to Cloudflare only, keep our platform and your SSH addresses allowed, or you lose console actions that reach the site.

Purge after changes

After a design change, flush the store's caches first, then purge Cloudflare's cache for CSS and JavaScript.

Did this solve it? If not, tell us what you see and we look at your server.

Open a ticket

Still stuck? Ask a person.

Tickets go straight to the engineers who run ShopWhizzy servers. Tell us the store, what you see and when it started, and we take it from there.