Is Cloudflare compatible with Imunify360?

Issue

Is Cloudflare compatible with Imunify360?

Environment

• Imunify360
• WebShield
• Cloudflare

Solution

Yes, Cloudflare is compatible with Imunify360. It is one of the supported CDN providers.

Please note that the WebShield SplashScreen is not compatible with aggressive CDN caching modes, like Cloudflare "Cache Everything" with "Edge Cache TTL". If the SplashScreen page is cached by the CDN, a visitor may see the SplashScreen from the CDN cache regardless of whether it has already been passed.

For this reason, the SplashScreen for Cloudflare domains is disabled by default.

This behavior is controlled by the disable_splash_for_cloudflare option in the /etc/imunify360-wafd/wafd.conf file (default value: true, meaning the SplashScreen is disabled for Cloudflare). 

Important: the previously used /etc/imunify360-webshield/splashscreen-antibot.conf file is deprecated and no longer affects the SplashScreen settings. Editing it has no effect.

To disable the WebShield SplashScreen completely (for all traffic, not only Cloudflare), use the following command:

imunify360-agent config update '{"WEBSHIELD": {"splash_screen": false}}'

For enabling it:

imunify360-agent config update '{"WEBSHIELD": {"splash_screen": true}}'

Note: If you use one of these settings on the Cloudflare side, like "Edge Cache TTL", "Cache Everything", or "Browser Cache TTL", you can try to apply these recommendations on the Cloudflare side and leave all Imunify360 features enabled:

https://docs.imunify360.com/features/#using-cloudflare-edge-cache-ttl-cache-everything-and-browser-cache-ttl-with-imunify360

Useful links

• https://docs.imunify360.com/features/#supported-cdn-providers
• https://docs.imunify360.com/dashboard/#webshield
• https://cloudlinux.zendesk.com/hc/en-us/articles/360017069879-How-to-disable-WebShield-for-a-domain-
• https://docs.imunify360.com/features/#anti-bot-protection
• https://docs.imunify360.com/dashboard/#anti-bot-protection