Barry Kooij

Remkus de Vries

manatarms

icyapril

Cloudflare

Patryk

deuill

thillcf

jacobbednarz

<h4>What this plugin can do for you</h4>
<p>[https://www.youtube.com/watch?v=DWANhxoDxFI]</p>
<p><strong>Automatic Platform Optimization (APO)</strong></p>
<p>Speed up your WordPress site by up to 300% with Cloudflare’s Automatic Platform Optimization (APO) plugin. APO allows Cloudflare to serve your entire WordPress site from our edge network of over 250+ data centers worldwide ensuring fast & reliable performance for your visitors no matter where they are.</p>
<p>Optimizing your WordPress site with multiple plugins can be overwhelming. Take your WordPress site’s performance to the next level by switching to a single plugin for CDN, intelligent caching, and other key WordPress optimizations with Cloudflare (APO). Visit our <a href="https://blog.cloudflare.com/automatic-platform-optimizations-starting-with-wordpress/" rel="nofollow ugc">announcement blog</a> to learn more about APO.</p>
<p><strong>What makes APO different from other caching plugins?</strong></p>
<p>The key differentiating factor between Cloudflare APO and other traditional page caching and CDN solutions is its ability to directly cache static HTML at Cloudflare’s edge. Every other plugin and CDN will cache your static assets (images, javascript, CSS), but none help you cache the actual content on your site (the HTML) using a massive edge network like Cloudflare’s.</p>
<p>APO intelligently caches your HTML pages and will automatically purge content from the cache that you update, so users will always see the latest content without compromising the performance of pages that haven’t been recently updated</p>
<p><strong>What you get with Cloudflare APO</strong></p>
<p>APO is a $5 add-on with Cloudflare’s free plan and comes with an unlimited amount of subdomains. With APO you also get to leverage many of the other benefits of Cloudflare such as <strong>Free DNS, Free Automated SSL Certificates, Free DDoS Mitigation, and more.</strong> APO is free for all paid plan users so if you have Cloudflare Pro or Business already you can just turn it on. You can compare all our plans <a href="https://www.cloudflare.com/plans/?utm_source=promo&utm_medium=social&utm_term=&utm_content=&utm_campaign=g421o-pl-apo-wordpress-plans" rel="nofollow ugc">here</a>.</p>
<p><strong>Protect your WordPress site with Cloudflare’s Web Application Firewall (WAF)</strong></p>
<p>Cloudflare’s WAF is available on all our <a href="https://www.cloudflare.com/plans/?utm_source=promo&utm_medium=social&utm_term=&utm_content=&utm_campaign=g421o-pl-apo-wordpress-plans" rel="nofollow ugc">paid plans</a> and comes with built-in rulesets, specifically tailored to mitigate WordPress threats and vulnerabilities. These security rules are regularly updated by our team of experts. At the flip of a switch, you’ll have your WAF up and running without any difficult adjustments to your site. With over 26 million internet properties under our protection, you can sleep easy knowing Cloudflare has your back.</p>
<h4>Additional features</h4>
<ul>
<li>
<p>Header rewrite to prevent a redirect loop when Cloudflare’s Universal SSL is enabled</p>
</li>
<li>
<p>Change Cloudflare settings from within the plugin itself without needing to navigate to the cloudflare.com dashboard. You can change settings for cache purge, security level, Always Online, and image optimization</p>
</li>
<li>
<p>View analytics such as total visitors, bandwidth saved, and threats blocked</p>
</li>
<li>
<p>Support for <a href="https://blog.cloudflare.com/announcing-support-for-http-2-server-push-2/" rel="nofollow ugc">HTTP2/Server Push</a></p>
</li>
</ul>


All of Cloudflare’s performance and security benefits in a simple one-click install.

zzmaster

<p>Plugin WP AntiDDOS prevents DDOS attacks on your website by blocking the frequent requests from one or several related IP addresses. This includes HTTP flood and Password cracking attacks. The plugin stores the data in the MySQL table (MEMORY engine), and that ensures its high performance. We recommend to insert a plugin call into the beginning of the  index.php  file of the WordPress, it will significantly increase its effectiveness, since attack requests will be rejected by plugin  before  WordPress heavy engine connection. You have to do it manually. (see the instructions on the page with plugin’s Configuration)</p>
<h4>How it works</h4>
<p>You are setting two main parameters in the Configuration of the plugin – Hits Limit and Seconds Limit. They specify the maximum number of requests from related IP addresses within a certain time. Plugin conciders IP addresses<br />
 a.b.c.1<br />
 a.b.c.2<br />
 a.b.c.3<br />
 …<br />
 a.b.c.255<br />
 as related, they usually belong to the same LAN, and DDOS attacks are often made from many computers on the local network, because if one computer is infected, the attacker easily can infect others. If the plugin detects that during Seconds Limit from some local network there is more than Hits Limit requests, then excessive requests are blocked – plugin responds by status  503 Service not available  with the code, which reloads the page after a while, which is specified in the plugin Configuration as Delay Time. Limits are specified separately for GET, POST, XHR and Login requests.</p>
<h4>Search engine compatibility</h4>
<p>Sometimes search engines produce enough frequent queries, which can cause blockage by the WP AntiDDOS plugin. However, the plugin does not affect search engine indexation, because a response with status code  502 Service not available  is not a content of a page, but a technical reports on its currently unavailability. In any case, we recommend to use  Crawl-delay directive in you robots.txt  file.</p>
<h4>Custom Query Processing</h4>
<p>WP AntiDDOS plugin can be configured to handling only a certain types of queries. For example, the search queries load the server most significantly, and therefore are often used to attack sites. In the plugin’s Configuration in the GET or POST parameters that activate DDOS check up  text field you can enter POST or GET parameters (blank separated) that identify the requests to be processed by plugin and then set the  Process only requests with following GET / POST parameters  to Yes. For example, s pwd parameters, which is defined in the text box since plugin has installed, identifies the WordPress’ search queries and Login attemts. Please, note, that you have separate setting for Login requests that is usefull for preventing Password Cracking attacks.</p>
<h4>The effectiveness of the plugin</h4>
<p>DDOS attacks are very different both by scale and by the used methods. Being a WordPress plugin, WP AntiDDOS is effective against such attacks as HTTP flood, which affect the WordPress engine. They are technically simple and most commonly used for disabling WordPress websites. Usage of the WP AntiDDOS plugin – good practice for basic protection, which is effective in a large number of cases.</p>


WP AntiDDOS

WP AntiDDOS Plugin prevents DDOS attacks on your website by blocking the frequent requests from one or several related IP addresses.

Cloudflare vs WP AntiDDOS