Cloudflare Overview
Cloudflare is a global reverse proxy (edge network) that protects and accelerates websites. All web traffic passes through Cloudflare's infrastructure, providing:
- Reduced response time via CDN and caching;
- Automatic DDoS and malicious request protection;
- Site availability from cache (Always Online);
- Analytics and traffic control tools.
The free plan includes: SSL, CDN, basic attack mitigation, rate limiting, caching, and WAF.
Generating an API Token
- Log in to your Cloudflare account and go to My Profile → API Tokens.
- Click Create Token and choose a template or create a custom one.
- Set the required permissions (DNS: Read/Edit, Zone: Edit, Firewall: Read, etc.).
- Save the token — it is shown only once.
We recommend using an Account API Token with limited access rights.
Connecting a Domain
- Go to Sites → Cloudflare in ISPmanager.
- Add your account and paste the API token.
- Select a domain and choose the connection type: Full or Partial.
- Save — ISPmanager will request Cloudflare NS records and display them in the log.
- Update NS records at your domain registrar. The status will update in 15–30 minutes.
Page Rules
You can create up to 3 rules on the free plan. One rule per URL.
- Set up redirects (301/302);
- Force HTTPS connections;
- Enable Browser Integrity Check;
- Adjust TTL, cache behavior, disable features, obfuscate email addresses.
Firewall
Traffic can be filtered by IP, range, or country.
- Open Cloudflare → Firewall.
- Select type (IP or Country) and enter the value.
- Action: Allow / Block / JS Challenge / CAPTCHA.
- Save the rule.
DNS Records
You can add A, CNAME, MX, TXT, and other records via the interface:
- Open Cloudflare → DNS Records.
- Set name, TTL, type, and value.
- Enable proxying (cloud icon).
- Save the record.
Settings
Under Cloudflare → Settings you can manage:
- Security level (Off, Low, High, Under Attack);
- SSL mode and HTTPS redirect;
- HTML, CSS, JS minification;
- HSTS, TLS 1.3, IPv6, hotlink protection;
- Developer Mode and mobile redirect.
Note: All changes are logged in ISPmanager’s operation journal. If your domain registrar does not use Cloudflare NS records, the domain will not be connected.
