{"id":7888,"date":"2024-05-14T06:20:08","date_gmt":"2024-05-14T06:20:08","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=7888"},"modified":"2026-09-15T00:17:06","modified_gmt":"2026-09-15T00:17:06","slug":"cloudflare-best-practice","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/cloudflare-best-practice","title":{"rendered":"Cloudflare Best Practice"},"content":{"rendered":"\n

Minimum TLS 1.2 https:\/\/developers.cloudflare.com\/ssl\/edge-certificates\/additional-options\/minimum-tls\/<\/a><\/p>\n\n\n\n

Enable CSAM Scanning Tool<\/p>\n\n\n\n

Enable HSTS<\/p>\n\n\n\n

Set Up Always Online<\/p>\n\n\n\n

Enable HTTPS Enforcement<\/p>\n\n\n\n

Enable DNSSEC for Record Integrity<\/p>\n\n\n\n

Turn On HTTP\/3 (QUIC) Support<\/p>\n\n\n\n

Set Security Level to Medium<\/p>\n\n\n\n

Implement Rate Limiting<\/p>\n\n\n\n

Enabled HSTS<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Block traffic from the Tor network<\/h3>\n\n\n\n
    \n
  1. Go to the\u00a0Cloudflare dashboard<\/a>.<\/li>\n\n\n\n
  2. Expand the Security section.<\/li>\n\n\n\n
  3. Select\u00a0WAF<\/strong>.<\/li>\n\n\n\n
  4. Select\u00a0Create rule<\/strong>.<\/li>\n\n\n\n
  5. For\u00a0Rule name<\/strong>, enter a relevant name.<\/li>\n\n\n\n
  6. For\u00a0If incoming requests match<\/strong>, for\u00a0Field<\/strong>, select\u00a0Continent<\/strong>.<\/li>\n\n\n\n
  7. For\u00a0Operator<\/strong>, select\u00a0equals<\/strong>.<\/li>\n\n\n\n
  8. For\u00a0Value<\/strong>, select\u00a0Tor<\/strong>.<\/li>\n\n\n\n
  9. For\u00a0Then take action<\/strong>, select\u00a0Block<\/strong>.<\/li>\n\n\n\n
  10. For\u00a0Place at<\/strong>, select\u00a0First<\/strong>.<\/li>\n\n\n\n
  11. Select\u00a0Deploy<\/strong>.<\/li>\n<\/ol>\n\n\n\n
    \"Screenshot<\/figure>\n\n\n\n

    Bot protection<\/h3>\n\n\n\n
      \n
    1. Go to the\u00a0Cloudflare dashboard<\/a>.<\/li>\n\n\n\n
    2. Expand the Security section.<\/li>\n\n\n\n
    3. Under\u00a0Configure Super Bot Fight Mode<\/strong>, for\u00a0Definitely automated<\/strong>, select\u00a0Block<\/strong>.<\/li>\n\n\n\n
    4. For\u00a0Likely automated<\/strong>, select\u00a0Managed Challenge<\/strong>.<\/li>\n\n\n\n
    5. For\u00a0Verified bots<\/strong>, select\u00a0Allow<\/strong>.<\/li>\n<\/ol>\n\n\n\n
      \"\"<\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"

      Minimum TLS 1.2 https:\/\/developers.cloudflare.com\/ssl\/edge-certificates\/additional-options\/minimum-tls\/ Enable CSAM Scanning Tool Enable HSTS Set Up Always Online Enable HTTPS Enforcement Enable DNSSEC for Record Integrity Turn On HTTP\/3 (QUIC) Support […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-7888","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t