Ecommerce websites on Cloudflare: best practices

Published on by Nick B.

Cloudflare provides numerous benefits to ecommerce sites, including advanced DDOS protection and an industry-leading Web Application Firewall (WAF) that helps secure your transactions and protect customers’ private data. A key Cloudflare feature is caching, which allows content to be served closer to the end user from our global network of

Understanding Our Cache and the Web Cache Deception Attack

Published on by Joshua Liebow-Feeser.

About a month ago, security researcher Omer Gil published the details of an attack that he calls the Web Cache Deception attack. It works against sites that sit behind a reverse proxy (like Cloudflare) and are misconfigured in a particular way. Unfortunately, the definition of "misconfigured" for the purposes of

Edge Cache Expire TTL: Easiest way to override any existing headers

Published on by Michelle Zatlyn.

CloudFlare makes caching easy. Our service automatically determines what files to cache based on file extensions. Performance benefits kick in automatically. For customers that want advanced caching, beyond the defaults, we have Cache Everything available as Page Rules. Designate a URL and CloudFlare will cache everything, including HTML, out at

CloudFlare's Free CDN and You

Published on by Damon Billian.

CloudFlare gets a lot of questions about caching and our free CDN (content delivery network), so I thought I would put together a really quick guide about what CloudFlare caches and more. Why should I cache my static content at all? Distributing your static content with CloudFlare's CDN