What if I use SSL?
● Set it up, but don’t click the orange clouds yet.● Add your SSL certificate details● Turn on the orange clouds
What gets blocked?
● Adjustable security levels to challenge visitors● White/black list by IP, Country● DDoS Protection
○ Turn on “I’m under attack!” mode to analyze ALL visitors & stop the baddies
What gets cached?
● All static assets (images, JS, CSS)● Not HTML, by default.● You can turn it on with white- or black-list rules● Or via Cache-Control headers● Can’t cache requests returning cookies
Results
● Protection from baddies!
● Response time decreased from 2.5s to 1.5s● Content size reduced by 300kb● Everything feels faster!
Mistakes
● GeoIP stopped working, as every request looks like it’s from CloudFlare
● CloudFlare blocked a partner who sends us webhooks
Considerations:
● Breaks the 1-Bus rule○ multi-user is enterprise only, starting at $2k :O
● You need to know what to cache● Not a silver bullet for performance