Cloudflare Settings Guide for Enhance WP sites

Adrien

Hello Enhancers,

I realized that Cloudflare isn't that simple to configure and I faced some issues with Rest API loopback on WordPress, probably due to SSL certificates/cookies.

I would appreciate it if someone could share his CF settings or a link to a guide that works with Enhance.

What should I put here?

Thanks a lot!

mendozal

Adrien I have it on Full (strict). And I didn’t do anything special on the server.

I believe the fact that there’s a certificate already in place (let’s encrypt) fulfills the requirements for this.

Adrien

mendozal Thank you Luis.

Question: Did you enable proxies for MySQL and FTP?
Actually, Cloudflare recommends doing it otherwise, we expose our IP.

Also, I've just enabled Proxy for A record and www, but I'm getting this in my WordPress Health Tools:

Your site could not complete a loopback request
Loopback requests are used to run scheduled events and are also used by the built-in editors for themes and plugins to verify code stability.

The loopback request returned an unexpected HTTP status code, 403, it was not possible to determine if this will prevent features from working as expected.

I know it's not a plugin, but this occurs every time I enable full strict + proxies.

Same for this:

The REST API encountered an unexpected result
Performance
The REST API is one way that WordPress and other applications communicate with the server. For example, the block editor screen relies on the REST API to display and save your posts and pages.

When testing the REST API, an unexpected result was returned:

REST API Response: (403) Forbidden

mendozal

Adrien I only activated proxy for the A record and the www CNAME record. I believe Cloudflare doesn't proxy protocols other than http/https.

Adrien

mendozal I found out: Btw Luis if you check your CF account >> DNS you'll see some small warning in front of MySQL and FTP advising to enable proxies that's why I was asking.

AdamM

Adrien I have always enabled this option for each website .I think it should be enabled by default.

Adrien

AdamM Yeah the error came back after a while even if this was disabled.
Something in CF is causing my loopback and restAPI issues.

Zoinkies

Adrien You can't proxy Enhance yet. I've spent endless hours that Adam can attest to trying to get Enterprise to work, and I cannot. You can't proxy Enhance CP, or services, only individual sites.

Adrien

Zoinkies Yes, it's precisely what I'm trying to do. I'm talking about a WP website. I feel it's something going on at CF level. That's why I was looking for a config guide or a link. I still have plenty of time to figure out so it's all good ;-)

Adrien

@mendozal @AdamM @Zoinkies

I FOUND THE issue it wasn't very pleasant! You can test it. Just enable Cloudflare Bot Fight Mode, and voila, check your WordPress website >> Tools >> Site Health:

Your site could not complete a loopback request
The REST API encountered an unexpected result

As soon as I disable Cloudflare Bot Fight Mode all errors are immediately gone.