Cache settings for CloudFlare

[Recep Baltaş]

Hi,

We have switched from Sucuri to Cloudlfare. What are the best cache settings for us ?

With Sucuri, if we aneabled full caching, users were finding themselves logged into other users accounts. I don't want that happen with Cloudflare again.

They also have a blog here:

https://support.cloudflare.com/hc/en-us/articles/202034110-Using-CloudFlare-with-Xenforo-forums

I need to apply a rule for the admin panel I think.

Thanks.

 

[m1ne]

Rocket mode off with aggressive caching and 1 week ttl. Minify everything.
Page rule for admin isn't needed.

 

[Rob]

Yeah, thats the exact setttings I have, except there is no "week" TTL..... 8 days I have mine set to.

 

[imthebest]

Do you really need the caching of CloudFlare? I mean are you running out of bandwidth or something like that? I use CloudFlare and I disabled every form of caching from their control panel since day 1. The result: ZERO problems.

The only reason why I use CF is to prevent attackers from knowing my server IP.

 

[rdn]

My current settings:

 

[sbj]

I'm using 1 day for browser cache expiration. Should I change that?

 

[Rob]

Why not use caching? Caching means that resources are served via cloudflare and saves your server resources. Result, less server bandwidth and faster website. I have zero problems, the trick is to NOT enable the rocket loader.

Incidentally, my GTMetrix page speed grade is A (97%)

 

[m1ne]

My current settings:
View attachment 104915

You like Mirage 2? It's really bad for me.

 

[rdn]

You like Mirage 2? It's really bad for me.

I didn't have problems with it.
What are your issues while using it?

 

[m1ne]

I didn't have problems with it.
What are your issues while using it?

Images load very slowly.

 

[Recep Baltaş]

The only reason why I use CF is to prevent attackers from knowing my server IP.

That is the same reason we are using CloudFlare. We were under heavy attack.

Thank you all for your replies. I will set it according to your advices after my hosting provider fine tunes everything after the CloudFlare switch.

 

[rdn]

Cloudflare doesn't help much about DDOS attacks.
You need a solid hardware/data center protection with that, Like OVH/SoYouStart/Versaweb.

 

[imthebest]

Cloudflare doesn't help much about DDOS attacks.

I have been using CF for 3+ years now and I can safely say that it helps A LOT against DDoS attacks.

 

[rdn]

I have been using CF for 3+ years now and I can safely say that it helps A LOT against DDoS attacks.

With Layer 7 type of attacks, I can say NO.

 

[imthebest]

It even works against Layer 7 attacks but you need the Business plan ($200/m) and set your protection level to High or get into the "I'm under attack mode".

 

[rdn]

I swear, new type of attacks can bypass that mode.
You still need a solid hardware on your server.

 

[Amin Sabet]

@RoldanLT - Does Mirage work with image attachments now? Last time I used Cloudflare, it didn't recognize Xenforo attachments as images.

I am currently using KeyCDN for my attachments, but KeyCDN doesn't optimize images for mobile at all.

 

[rdn]

Not sure about that.
But I force cache it anyway.

 

[Pierce]

I cache the data and avatar folders for 1 hour and the results in cloudflare cache hit rate was crazy high.

 

[rdn]

I cache the data and avatar folders for 1 hour and the results in cloudflare cache hit rate was crazy high.

What if the user change avatar?