Improving Flarum speed with Cloudflare cache

matteocontrini

[deleted] yes, although I'm one of those that think that application attacks should be handled in the application 🙂

[deleted]

matteocontrini You're not alone in that thought !

rob006

[deleted] It's not a Captcha. It's the initial loading of the site

Your "initial loading" returns 403 status code? That's unusual 😆

[deleted]

rob006 It does the same on all sites - even those without CF it seems 😕 and it's the same with discuss. I do get your point though - it certainly looks like a Captcha request but I can't see any matching logs at CF for my sites.

1Dot

[deleted] A bit off-topic, But you forgot to hide this https://hoppyhope.org//wp-includes/wlwmanifest.xml
🤣 😆 I seen that you hidden wp-login.php and also wp-admin then why forgot this

[deleted]

1Dot Because that's the Windows Live Writer file, which in retrospect is almost harmless as it will attempt to use xmlrpc, which is disabled. Obscurity is not security.

rob006

[deleted] It does the same on all sites - even those without CF it seems 😕 and it's the same with discuss.

Disqus is behind Cloudflare. My blog isn't and it is working fine:

Justoverclock

mine is pretty bad 🙁

[deleted]

Justoverclock Yes, but as @rob006 pointed out, your site resolves to HTTP 200, so clearly it IS being blocked by CF (for my site at least) as a bot. What's odd though is that I can clearly see the session being built from this IP via CF to my server, so it does get through.

1Dot

Justoverclock See https://discuss.flarum.org/d/28164 and also some proof in low end server

[deleted]

1Dot Yes, but note the 403 error code. You can't rely on this site to present real figures unless you whitelist the IP address at CF. On investigation, it's being blocked by the Browser integrity check but the traffic request does make it to my server which responds.

Very odd. 100% unreliable test in this case though.

1Dot

[deleted] Browser integrity check

Phenomlab But I can see the ip accessed my server in my server logs and also screenshot is of site not that access denied.

Yes but there are a lot of differences I used that pingdom you share see what I got

[deleted]

1Dot Phenomlab But I can see the ip accessed my server in my server logs and also screenshot is of site not that access denied.

Same here

1Dot Yes but there are a lot of differences I used that pingdom you share see what I got

Yes, but look at your load time ! Anything over 1 second these days is considered slow.

rob006

1Dot also screenshot is of site not that access denied.

Screenshot is provided by different service in different data center.

[deleted]

rob006 Very interesting. I see your site is also WordPress - impressive !

1Dot

[deleted] Yes, but look at your load time ! Anything over 1 second these days is considered slow.

Hmm Any tips to improve this and what's the problem with gtmetrix I always get A

Stylix58

My website have a C grade on GT Metrix. I don't use Cloudflare.
https://gtmetrix.com/reports/discuss.stylix.ynh.fr/jEwisSKD/

1Dot

Stylix58 Your site is down as per I can see or maybe you blocked some countries and a PRO tip use cloudflare and do the configuration I share you will get a A grade

Stylix58

1Dot
Sorry but this domain is a subdomain, and Cloudflare don't allow that subdomain.

Stylix58

1Dot
I don't have my own domain btw. Also I can't use Freenom because he is dead bruh!

Kulga

There are two main reasons I've been using cloudflare behind a proxy

Really fast DNS updates. Sometimes I will allocate a forum to another server and not having a "up to" 48 hour update window is nice.

It also hides some ports like ssh, even though it doesn't seem to help cut down on logs much 😅

MohdKhan

I'll share my experience in detail.

Actually I feel using CF for DNS is only good Choice Else a Myth.

« Previous Page Next Page »