☁️ কেন Cloudflare?
- Free CDN — global cache
- Free SSL — automatic
- DDoS protection unmetered
- Fastest DNS
- Page Rules, Firewall, Analytics
🔧 Setup
- cloudflare.com → Add Site
- DNS auto-scan
- Nameserver Cloudflare-এ point
- 1-2 hour active
🟧 Proxy ON vs OFF
Proxy ON (Orange):
- IP hidden, DDoS protection
- CDN cache, SSL automatic, WAF
DNS Only (Grey):
- Direct connection
- Real IP visible
- Mail (MX) সবসময় Grey
🛡️ Security Settings
- SSL/TLS: Full (strict)
- Always Use HTTPS: ON
- Auto HTTPS Rewrites: ON
- Bot Fight Mode: ON
- Browser Integrity Check: ON
📜 Page Rules (Free 3)
# www → non-www
www.example.com/* → 301 → https://example.com/$1
# Cache static
example.com/static/* → Cache Everything, 1 month
# Bypass admin
example.com/admin/* → Bypass cache
🔥 Firewall Rules
(ip.geoip.country in {"CN" "RU"}) → Block
(http.request.uri.path eq "/login") → Challenge if >5/min
(cf.client.bot) and not (cf.verified_bot) → Block
🎓 মূল কথা ⭐
Cloudflare = free production-grade infrastructure। Day 1 setup। SSL Full strict, Always HTTPS, Bot Fight Mode = baseline।