Maximizing Website Performance and Security with CloudFlare: Advanced Tuning Guide

// Page Rules for Caching
{
  "url": "example.com/*",
  "actions": {
    "cache_level": "cache_everything",
    "edge_cache_ttl": 86400,
    "browser_cache_ttl": 14400
  }
}

# Nginx configuration for optimal CloudFlare caching
location ~* \.(jpg|jpeg|png|gif|ico|css|js)$ {
    expires 365d;
    add_header Cache-Control "public, no-transform";
}

{
  "minify": {
    "js": true,
    "css": true,
    "html": true,
    "exclude": [
      "example.com/custom.js",
      "example.com/special.css"
    ]
  }
}

// Block suspicious requests
{
  "expression": "(http.user_agent contains \"suspicious\") or (ip.geoip.country eq \"XX\")",
  "action": "block"
}

// Rate limiting
{
  "expression": "ip.src eq \"192.0.2.0\"",
  "action": "rate_limit",
  "ratelimit": {
    "requests_per_period": 100,
    "period": 60
  }
}

{
  "ssl": {
    "mode": "full_strict",
    "min_tls_version": "1.2",
    "ciphers": [
      "ECDHE-ECDSA-AES128-GCM-SHA256",
      "ECDHE-RSA-AES128-GCM-SHA256"
    ]
  }
}

addEventListener('fetch', event => {
  event.respondWith(handleRequest(event.request))
})

async function handleRequest(request) {
  // Customize response based on user agent
  const userAgent = request.headers.get('user-agent')
  if (userAgent.includes('Mobile')) {
    return await fetch('mobile-optimized-version')
  }
  return await fetch(request)
}

{
  "polish": "lossless",
  "webp": "on",
  "brotli": true,
  "mirage": true
}

# .htaccess configuration
<IfModule mod_headers.c>
    Header set Cache-Control "max-age=31536000, public"
</IfModule>

# Nginx configuration
location / {
    add_header Cache-Control "s-maxage=604800, max-age=86400";
}

{
  "waf": {
    "mode": "on",
    "sensitivity": "high",
    "custom_rules": [
      {
        "description": "Block SQL Injection Attempts",
        "expression": "http.request.uri.query contains \"SELECT\"",
        "action": "block"
      }
    ]
  }
}

{
  "ddos": {
    "sensitivity_level": "high",
    "challenge_ttl": 3600,
    "under_attack_mode": true
  }
}

// Analytics Worker
addEventListener('fetch', event => {
  event.respondWith(trackPerformance(event.request))
})

async function trackPerformance(request) {
  const start = Date.now()
  const response = await fetch(request)
  const duration = Date.now() - start
  
  // Log performance metrics
  console.log(`Request to ${request.url} took ${duration}ms`)
  return response
}

{
  "security_level": "high",
  "challenge_ttl": 2700,
  "browser_check": true,
  "email_obfuscation": true,
  "hotlink_protection": true
}