Cloudflare and WP Cerber
How to make them play nice together on your WordPress
If your site is behind the Cloudflare proxy service and your WordPress is protected by the WP Cerber plugin, you have to do two things to let them work well together.
- Enable My site is behind a reverse proxy on the Main Settings page.
- If you have configured the Custom login URL, you have to exclude it from caching by Cloudflare’s servers. Do that by adding a rule on the Page Rules settings page in your Cloudflare account settings as described here: https://support.cloudflare.com/hc/en-us/articles/200172316-How-do-I-exclude-a-specific-URL-from-CloudFlare-s-caching-
Integration with the Cloudflare firewall
Consider using an optional Cloudflare add-on to synchronize locked out malicious IP addresses and access-lists entries with the Cloudflare cloud-based firewall.
Have any questions?
If you have a question regarding WordPress security or WP Cerber, leave them in the comments section below or get them answered here: G2.COM/WPCerber.
WP Cerber Security 6.0
WP Cerber Security 6.1
I'm a team lead in Cerber Tech. I'm a software & database architect, WordPress - PHP - SQL - JavaScript developer. I started coding in 1993 on IBM System/370 (yeah, that was amazing days) and today software engineering at Cerber Tech is how I make my living. I've taught to have high standards for myself as well as using them in developing software solutions.
So you would bypass the caching on the login page? I just want to make sure that’s what you mean? If I setup my WordPress login page in Cerber as https://www.mysite.com/jim that’s the url I would create a page rule in cloudflare to bypass caching for?
Exactly.
I’m using CloudFlare for my DNS and HTTPS. When I check ‘My site is behind a reverse proxy’ and save the settings, my site’s links simply stop working. Clicking on them does nothing. I can right-click and Open In A New Window okay, but I can’t expect my site visitors to do that. FORTUNATELY when I turn that switch back to OFF, save the settings, and then clear the cache on CloudFlare.com, it works okay again.
I do not wish to implement the Custom login URL so I did not setup the Rule as described on this page. There’s no explicit mention that the two things must be done together, so I didn’t. What might be the problem?
What does “my site’s links simply stop working” mean?