Xenforo from Sucuri to Cloudflare

[qwer81]

Hi guys,

In a few days I would like to switch from Sucuri (used since the time of vbulletin) to Clouflare. First of all, do you advise me to switch to Clouflare? Does it integrate well with Xenforo?

Another thing: at the level of CSM and basic settings of Xenforo I don't have to change anything right? Server side only?

 

[Paul B]

XF works fine with CF.

It's personal preference whether you use it or not.

Nothing needs to be changed within XF.

 

[qwer81]

XF works fine with CF.

It's personal preference whether you use it or not.

Nothing needs to be changed within XF.

Ok! I just have to change the DNS, right?

 

[fly]

Ok! I just have to change the DNS, right?

Correct.

 

[eva2000]

I made the switch from Sucuri to Cloudflare for my Xenforo forums ~4-5 yrs ago IIRC. My Xenforo forums have been through Cloudflare free, pro, business and now enterprise plans in the past 4+ yrs or so

You can read the following to get started

• https://support.cloudflare.com/hc/en-us/articles/202032590
• https://support.cloudflare.com/hc/en-us/articles/200170786-Restoring-original-visitor-IPs
• CloudFlare Page Rules for Caching | XenForo community
• CloudFlare Page Rules | XenForo community

Also Xenforo’s image and link proxy Options - XenForo 2 Manual can reveal your server real IP by default unless you configure a separate server forward HTTP proxy and set it in Xenforo config file $config['http']['proxy'] Config.php options - XenForo 2 Manual

HTTP client settings​

These settings control the behavior of the internal XenForo HTTP client, which is used to fetch resources from across the internet, such as images and web pages when using the Image and link proxy .

• $config['http']['sslVerify'] = null ;
• $config['http']['proxy'] = null ;

The sslVerify setting will force the system the verify the SSL certificate of any sites it visits using the SSL/HTTPS when requesting resources. Setting this value to true can be of benefit in some circumstances, but there are a number of ways that SSL certificate verification can fail, resulting in an inability to fetch the resource requested. If in doubt, leave this setting alone.
If you want the internal XenForo HTTP client to perform its requests through a proxy, enter the proxy server’s address in the proxy setting.

That’s what I do for my Xenforo forums. You can see discussion at XF 1.5 - Untrusted Http Client | Page 3 | XenForo community

 

[qwer81]

I made the switch from Sucuri to Cloudflare for my Xenforo forums ~4-5 yrs ago IIRC. My Xenforo forums have been through Cloudflare free, pro, business and now enterprise plans in the past 4+ yrs or so

You can read the following to get started

• https://support.cloudflare.com/hc/en-us/articles/202032590
• https://support.cloudflare.com/hc/en-us/articles/200170786-Restoring-original-visitor-IPs
• CloudFlare Page Rules for Caching | XenForo community
• CloudFlare Page Rules | XenForo community

Also Xenforo’s image and link proxy Options - XenForo 2 Manual can reveal your server real IP by default unless you configure a separate server forward HTTP proxy and set it in Xenforo config file $config['http']['proxy'] Config.php options - XenForo 2 Manual


That’s what I do for my Xenforo forums. You can see discussion at XF 1.5 - Untrusted Http Client | Page 3 | XenForo community

For the cache, I set the "cache level" to "Standard". And I didn't add anything else. Is this okay for normal operation? On Sucuri the cache was disabled.