Understand Cloudflare DNS and the proxy
Know what the orange cloud changes and what it does not
Read tutorial →Cloudflare & Security
Protect what you build.
Learn DNS, SSL/TLS, caching, WAF rules, origin protection, firewall strategy, and practical website hardening.
Start here
What this section will teach you.
Security here is taught as layers. Cloudflare can protect the edge, but the origin still needs correct TLS, careful firewall rules, strong authentication, updates, and sensible exposure of services.
01
Understand authoritative DNS and proxied records
02
Use Full (strict) TLS and origin certificates correctly
03
Cache static content without breaking dynamic WordPress pages
04
Build WAF rules around actual attack patterns
05
Protect the origin and reduce direct exposure
06
Harden WordPress and administrator access
07
Read logs and distinguish noise from useful signals
08
Create a repeatable patching and backup routine
Learning path
Follow the ideas in order.
You can jump directly to the subject you need, or work through the path from left to right.
01DNSOpen lesson → 02TLS / SSLOpen lesson → 03CachingOpen lesson → 04WAF RulesOpen lesson → 05Origin ProtectionOpen lesson →
06WordPress Security
07Logs
08Maintenance
Published guides
Tutorials & projects
New articles assigned to this category appear here automatically.
Configure Full (strict) with an Origin CA certificate
Encrypt and validate the Cloudflare-to-origin connection
Read tutorial →Cache WordPress safely with Cloudflare
Speed up public pages without breaking wp-admin, logins, carts, or personalized content
Read tutorial →Design Cloudflare WAF rules around behavior
Build maintainable rules that target attack patterns without blocking search engines or real visitors
Read tutorial →Reduce direct access to the origin server
Make bypassing Cloudflare harder while preserving management access
Read tutorial →