Preface

With the official completion of the ten-part cloudflare tutorial series (these ten parts are considered the official series; any future releases will only be considered spin-offs, which doesn't change the fact that the official series has only ten parts~), I figured it's also time to create a dedicated summary post for cloudflare: to turn the tutorial series and various previous practical articles on cloudflare features into a learning map, making cloudflare-related content much clearer at a glance (although cloudflare tags can also quickly categorize them, they don't intuitively reflect the logic). This is also the first learning map on my blog, besides the sitemap, structured around a specific knowledge system that I consider important.

Cloudflare Tutorial Series

The Cloudflare Tutorial Series is a theory + practical tutorial I wrote based on my daily experience, targeting Cloudflare's overall solution and each important functional module within it. It is divided into the ”Foundation” trilogy (mainly introducing Cloudflare's overall solution and many important and basic concepts involved), the ”Golden Core” trilogy (mainly introducing the three functions of WAF, DDoS protection, and Cache Rules, which are the most commonly used basic trio for building websites), the ”Nascent Soul” trilogy (mainly introducing the three functions of Workers, R2, and Zero Trust, which are considered more advanced Cloudflare skills), and the final chapter's Side Story (mainly introducing the various redirections supported by Cloudflare).

• Cloudflare Tutorial (1) Introduction to CF and Its Benefits to Personal Webmasters
  Cloudflare Tutorial Series Part 1, one of the ”Foundation” trilogy.
• Cloudflare Tutorial (Part 2): Introduction to the Functions of Technical Nodes in the CF Overall Solution Traffic Sequence
  Cloudflare Tutorial Series Part 2, two of the ”Foundation” trilogy.
• cloudflare tutorial (Part 3): How to Enter CF's Edge Network and How to Choose the Right Origin-Pull Method Cloudflare Tutorial Series Part 3, three of the ”Foundation” trilogy, Phase One is complete.
• Cloudflare Tutorial (4) CF WAF Feature Introduction and Detailed Configuration Tutorial
  Cloudflare Tutorial Series Part 4, one of the ”Golden Core” trilogy.
• Cloudflare Tutorial (5) Introduction to DDoS Attacks and CF DDoS Protection Configuration Tutorial
  Cloudflare Tutorial Series Part 5, two of the ”Golden Core” trilogy.
• Cloudflare Tutorial (6) CF Cache Rules Feature Introduction and Detailed Configuration Tutorial Cloudflare Tutorial Series Part 6, three of the ”Golden Core” trilogy, Phase Two is complete.
• Cloudflare Tutorial (7) CF Worker Feature Introduction and Practical Operation, Verification, and Related Technical Principle Research on Implementing ”Beggar's Version of APO for WordPress” Based on Worker to Accelerate Website Access
  Cloudflare Tutorial Series Part 7, one of the ”Nascent Soul” trilogy.
• Cloudflare Tutorial (8) CF R2 Feature Introduction and Detailed Tutorial on Building an Image Hosting Service Based on R2
  Cloudflare Tutorial Series Part 8, two of the ”Nascent Soul” trilogy.
• Cloudflare Tutorial (9) Introduction to Common Zero Trust Features and Multi-Scenario Usage Tutorial
  Cloudflare Tutorial Series Part 9, three of the ”Nascent Soul” trilogy, Phase Three is complete.
• Cloudflare Tutorial (10) Final Chapter: Introduction to Redirection Features and Multi-Scenario Configuration Tutorial
  Cloudflare Tutorial Series Part 10, Side Story, Final Chapter.
• Discussing the commonly used ”custom IP”, ”optimized IP”, and ”optimized domain name” from the ”core concepts and practices” of achieving website acceleration via Cloudflare CDN” Although this article is not part of the tutorial series, it can be considered a higher-level summary of the series.
• In the Era of AI Agents, Cloudflare Precursor is Redefining Bot ProtectionPrecursor has changed how JavaScript Detection signals are used in Bot protection: shifting from one-time detection to continuous evaluation based on the visit process.

Cloudflare Practical Guide Summary

The following section consists of practical guides completed using one or more Cloudflare features, which can also serve as practical supplements to some features in the Cloudflare Tutorial Series.

• Solve the problem of having a public IP but no legal ports 80 and 443 for website building through Cloudflare's Origin Rules
  To solve the issue where, in a domestic environment, using Cloudflare to build a website with the default public IP origin pull results in having a public IP but no port 80 and 443 access because the domain name is not registered (ICP filing). However, this method is no longer recommended. Whether it is domestic home broadband or a cloud host, using it as an origin server for Cloudflare's public IP origin pull is too dangerous: if you still need to use public IP origin pull in China, you should honestly use a registered domain name and adopt a domestic CDN.
• Use Tunnel technology to allow home broadband without a public IP to leverage Cloudflare for free to achieve fast website building (Recommended)
  This is currently the recommended way to build a website using domestic equipment (whether home broadband or cloud hosts). As long as the tunnel can be stably established, it is currently the safest method, and it does not require the origin server to have a public IP.
• Leverage Cloudflare for free via domestic ICP-filed cloud hosts to achieve fast access to domestic sites from abroad
  This article was written in the early days. It actually uses Tencent Cloud hosts as Cloudflare's origin server (via public IP origin pull), which no longer has practical significance in China (it is still effective using foreign cloud hosts). However, it contains detailed steps for migrating domains hosted on Tencent Cloud to Cloudflare, which friends in need can refer to.
• Use Cloudflare to create email aliases with your own domain suffix
  Very useful. Using a domain hosted on Cloudflare to create an email address with your own domain suffix is indeed a great tool for showing off, though it can only receive emails.
• Use Cloudflare + Resend + Gmail to build a free personal-grade business email
  Solving the previous issue where the email with your own domain suffix could only receive emails; now it can also send them. However, if it is a domestic email provider, there will be a "sent on behalf of" warning, but entering the inbox is not a problem.
• Make rational use of Cloudflare WARP to speed up your access to websites (Desktop Version)
  It is no longer suitable for domestic home broadband users, but it still works well abroad.
• Home Data Center Series: Deploy Cloudflare WARP on Cloud Servers to Improve Network Access Speed (Linux CLI Version)
  It is no longer suitable for domestic cloud hosts, but it still works well abroad.
• Use GitHub + Cloudflare Pages to build a new home for the WWW navigation page
  The most basic way to host static pages for free using HTML templates based on GitHub and Cloudflare Pages.
• Using Hexo to build a static blog and deploy it to Cloudflare Pages
  An advanced version of building and hosting a static blog for free using Hexo based on GitHub and Cloudflare Pages.
• Using rclone and Cloudflare R2 to build an off-site disaster recovery image hosting for Chevereto
  Suitable for friends who originally used Chevereto to build their own image hosting. You can use R2 as the main image host that is truly online 24 hours a day, while Chevereto can serve as a backup image host (acting as a part-time watermarking tool).
• Utilizing Cloudflare Tunnel to achieve automatic takeover by a disaster recovery site when the main WordPress site fails
  Advanced techniques based on Cloudflare Tunnel can solve the weakness of ”home data centers”: power outages and network disconnections, though it requires cooperation with a cloud host.
• Deflowered! Recording the first time my blog was hit by a DDOS attack、 Second Attack! Optimization of internal blog access workflow under the new situation、 Stress testing successfully completed! Thanks for the help, brother, it's working now!
  The DDoS Attack Trilogy can be considered a practical exercise of Cloudflare's DDoS protection features. However, in addition to Cloudflare's own protection features, it also requires the cooperation of relevant security solutions within the home data center, which I will discuss in a dedicated article in the future.
• The new protocol ”MASQUE” arrives with a bang, and WARP is ”temporarily” resurrected with full strength! WARP using the latest protocol has returned!
• Solving the WordPress AJAX Protection Dilemma: Using Cloudflare Tunnel to Achieve Normal Website Access and Attack Traffic ”Traffic Splitting” Protection
• Potential Pitfalls of Building Websites with Cloudflare Tunnel: The Impact of Non-Standard Ports and SEO Optimization Guide Friends who use Cloudflare Tunnel to build websites and are concerned about SEO need to pay attention to this.
• From QUIC to HTTP2: Building a more stealthy and stable Cloudflare Tunnel solution This is the protocol I recommend for Cloudflare Tunnel in the future.
• Building an Efficient and Secure Random Image API: A Practical Guide to Cloudflare Worker + R2 + KV A random image API solution based on Cloudflare Workers + R2 + KV.
• Optimizing Website Loading Speed: Cloud-based Loading and Management of Third-Party Scripts via Cloudflare Zaraz Stripping third-party scripts from web pages and loading and managing them on Cloudflare's edge network.
• Cloudflare Pro In-Depth Experience: From Free to Pro, Is It Really Worth the Upgrade? Detailed usage analysis of Cloudflare Pro vs Free
• Cloudflare APO Cache Invalidation Analysis: Causes and Solutions for Cf-Cache-Status BYPASS
• Cloudflare Worker + KV: Building WordPress Cloud Article Reading Statistics Finally, I can delete the article view statistics plugin
• “In-depth Analysis of ”API Shield": Building a More Secure Cloudflare API Protection System No more worrying about your API being maliciously accessed and attacked at will.
• Achieving Precise Cache Purging via Cloudflare: Cache-Tag and Prefix Methods in Practice Finally, I can say goodbye to the wasteful behavior of ”purging all cache content” at every turn!
• Cloudflare Monitoring and Alerting Combination in Practice: Lightweight O&M Experience Brought by Health Checks + Event Alerts Much more reliable than building your own uptime monitoring.
• The Second Reconstruction of Blog Architecture: Service Migration and Active-Active Disaster Recovery Practice Triggered by VPS Relocation Finally achieved WordPress site multi-active + automatic disaster recovery
• dnscrypt-proxy (v2.1.8) Multi-Scenario Configuration Guide: From Upstream Deployment to Downstream Integration A DNS upstream node deployment case with ”complete closure” as the security guiding ideology, cooperating with Cloudflare Tunnel.
• “Architecture and Principles of ”Non-Direct Connection" Self-Built Proxy Nodes: Combined Practice of sing-box and Cloudflare Self-built proxy solution using Cloudflare as a transit.
• Solving the Comment Synchronization Problem in WordPress Multi-Active Architecture with Cloudflare Workers Actually, I feel like I'm just messing around. What personal blog would set up active-active high availability anyway~.
• Implementation plan of WordPress multi-active architecture (simplified version) in personal blogs. The WordPress multi-active solution based on Cloudflare Tunnel has finally been implemented~~.
• Linking Cloudflare and WordPress Caching: A Practical Guide to the Super Page Cache Plugin Allowing WP users with free Cloudflare accounts to also enjoy some APO benefits~.
• Cloudflare-Based Emby Media Showcase Site Transformation: From Public Release to Access Experience Optimization