Overview Version (5) Discussion (5)

• 

  [DigitalPoint] App for Cloudflare®

  Everything is available from within XenForo (you do not need to go to Cloudflare for things) via the

  app for cloudflare

  cloudflare

  cloudflare r2 bucket
  About this resource

  

  
  Everything is available from within XenForo (you do not need to go to Cloudflare for things) via the Cloudflare API. This allows you give admins permission to do certain things (for example block IP addresses within Cloudflare without giving them access to your Cloudflare account).
  
  It simplifies/automates much of the configuration and usage of Cloudflare with XenForo.
  

  • Manage all Cloudflare settings/options for your zone.
  • Ability to purge Cloudflare cache.
  • Cloudflare Firewall support
    • You can automatically create firewall filters to block access to XenForo internal directories that are not intended to be accessed via web browser (internal_data and src). You can also delete any firewall filter.
    • Create/delete Firewall user agent rules.
    • Create/delete Firewall IP address and ASN rules. Includes the ability to optionally expire the rule in the future (for example maybe you want to block a class C for 7 days, or you want to force a challenge to a specific IP for 30 days).
    • Manage country-level traffic blocking (includes Tor exit nodes).
    • Ability to force challenge on the registration and contact forms (helps mitigate automated spam).
  • Cloudflare Access support
    • You can automatically create Access policies to allow only admins the ability to access the install and admin.php URLs. You can also delete any existing Access policy.
  • Cloudflare Page Rules support
    • You can view and delete any Page Rules on your zone.
  • Cloudflare Cache Rules support
    • You can automatically create a Page Rule that will instruct Cloudflare to cache XenForo CSS files (normally they are not cached because Cloudflare caches based on file extension, and XenForo's CSS system has .php extension).
    • You can automatically create a Page Rule that will instruct Cloudflare to cache images served through XenForo's image proxy (similar to XenForo's CSS, Cloudflare normally does not cache them because the image proxy uses .php extension).
  • Cloudflare Turnstile support (requires XF 2.2.12+)
    • You can automatically configure/create Turnstile site via API.
    • Gives direct links to Turnstile Settings and Analytics within Cloudflare account.
  • Web Analytics allows you to enable (or disable) privacy-focused web analytics to measure how your users see performance of your site
  • DMARC Management allows you to monitor third parties sending email on your behalf
  • Use Cloudflare Workers as proxy to hide your server's origin IP address for certain XenForo functions:
    • Image proxy
    • Unfurl
  • Support for Cloudflare R2 (object storage) to store things like avatars and attachments in the cloud.
    • Includes an optional ability to use presigned URLs for attachments
  • Support for caching certain content at the network edge(in Cloudflare data centers):
    • HTML pages for guests
    • Media attachments (images, audio, video)
  • Support for resource preloading
    • JavaScript
    • CSS
  • Shows Cloudflare statistics for your domain on admin index. Additionally, daily stats are kept in XenForo's normal Statistics area for:
    • Unique visitors
    • Requests
    • Data served
    • Data cached
    • Threats
    • Turnstile challenges
    • Turnstile interactive solves
    • Turnstile non-interactive solves
    • Turnstile unsolved
    • R2 class A operations
    • R2 class B operations
  • Moderators that have the ability to spam clean and view user's IPs get an extra option in the spam cleaner where they can temporarily ban the IP address(es) the spammer used in the last 30 days. The number of days to ban is an option you can set in the admin area (it defaults to 7 days).
  • Ability to backup and restore certain Cloudflare configuration (Access Apps, Firewall Rules, Firewall IP Access Rules, Firewall User Agent Blocking, Page Rules).
    • You can restore backups to a different zone (for example if you had extensive configuration for a zone, you could give another zone the same configuration through a backup restore).
    • Restoring a backup does not delete existing configurations (you are able to merge configuration into an existing config).
  • Cloudflare configuration is protected by a new admin permission, Manage Cloudflare.

  In exchange for being free, this addon has a single attribution link buried on the bottom of XenForo's Help -> Cookie usage page (there are no site-wide or footer links).
• Version

  1.9.9 Stable Available Feb 18, 2026 · 1

  Download

  File size: 205.2 KB

  SHA-256: c1bbae821f418563b93b2d955b7a115edf6a966971bdbfbf58a19f79efb224a2

  SHA-256 verified Package valid Compatibility checked Last verified: Wednesday at 12:10 AM

  • Added additional extensions to the Cache Rule for caching static content
  • New Cloudflare Security option: Markdown for Agents

  1.9.8.1 Stable Available Jan 7, 2026 · 0

  Download

  File size: 205.1 KB

  SHA-256: 47a8b72362a4992f98d407586383d968efc64ea8dfb5cfa86fa11289b057366b

  SHA-256 verified Package valid Compatibility checked Last verified: Wednesday at 12:10 AM

  • Fixed an issue where IPv6 addresses wouldn't always be geotargeted correctly with XF 2.3+.
  • Uploads to R2 will work if the source stream isn't seekable (things like uploading with the URL as a source)

  1.9.8 Stable Available Dec 23, 2025 · 0

  Download

  File size: 205 KB

  SHA-256: b312f74b43e05352ab0f0eeae78292beca6350f1090127475f2203c369df44af

  SHA-256 verified Package valid Compatibility checked Last verified: Wednesday at 12:10 AM

  • Update to how we use inet_pton() (compatibility with a change in PHP 8.5.1, 8.4.16, 8.3.29, 8.2.30, 8.1.34)

  1.9.7 Stable Available Dec 10, 2025 · 0

  Download

  File size: 204.7 KB

  SHA-256: aed2b73b1a18287eaa20fb9d71bdaea683b4e559b36855b518469cec8681f07f

  SHA-256 verified Package valid Compatibility checked Last verified: Wednesday at 12:10 AM

  • New function gives the ability to copy Cloudflare settings from a different domain/zone within the same Cloudflare account

  1.9.6.2 Stable Available Nov 24, 2025 · 0

  Download

  File size: 203.8 KB

  SHA-256: eb22ecfda47c2a3ceefa8018dbc1a2880149de06ffae4b81e4a6faefe082ef9a

  SHA-256 verified Package valid Compatibility checked Last verified: Wednesday at 12:10 AM

  View attachment 1426​

  
  Everything is available from within XenForo (you do not need to go to Cloudflare for things) via the Cloudflare API. This allows you give admins permission to do certain things (for example block IP addresses within Cloudflare without giving them access to your Cloudflare account).
  
  It simplifies/automates much of the configuration and usage of Cloudflare with XenForo.
  

  • Manage all Cloudflare settings/options for your zone.
  • Ability to purge Cloudflare cache.
  • Cloudflare Firewall support
    • You can automatically create firewall filters to block access to XenForo internal directories that are not intended to be accessed via web browser (internal_data and src). You can also delete any firewall filter.
    • Create/delete Firewall user agent rules.
    • Create/delete Firewall IP address and ASN rules. Includes the ability to optionally expire the rule in the future (for example maybe you want to block a class C for 7 days, or you want to force a challenge to a specific IP for 30 days).
    • Manage country-level traffic blocking (includes Tor exit nodes).
    • Ability to force challenge on the registration and contact forms (helps mitigate automated spam).
  • Cloudflare Access support
    • You can automatically create Access policies to allow only admins the ability to access the install and admin.php URLs. You can also delete any existing Access policy.
  • Cloudflare Page Rules support
    • You can view and delete any Page Rules on your zone.
  • Cloudflare Cache Rules support
    • You can automatically create a Page Rule that will instruct Cloudflare to cache XenForo CSS files (normally they are not cached because Cloudflare caches based on file extension, and XenForo's CSS system has .php extension).
    • You can automatically create a Page Rule that will instruct Cloudflare to cache images served through XenForo's image proxy (similar to XenForo's CSS, Cloudflare normally does not cache them because the image proxy uses .php extension).
  • Cloudflare Turnstile support (requires XF 2.2.12+)
    • You can automatically configure/create Turnstile site via API.
    • Gives direct links to Turnstile Settings and Analytics within Cloudflare account.
  • Web Analytics allows you to enable (or disable) privacy-focused web analytics to measure how your users see performance of your site
  • DMARC Management allows you to monitor third parties sending email on your behalf
  • Use Cloudflare Workers as proxy to hide your server's origin IP address for certain XenForo functions:
    • Image proxy
    • Unfurl
  • Support for Cloudflare R2 (object storage) to store things like avatars and attachments in the cloud.
    • Includes an optional ability to use presigned URLs for attachments
  • Support for caching certain content at the network edge(in Cloudflare data centers):
    • HTML pages for guests
    • Media attachments (images, audio, video)
  • Support for resource preloading
    • JavaScript
    • CSS
  • Shows Cloudflare statistics for your domain on admin index. Additionally, daily stats are kept in XenForo's normal Statistics area for:
    • Unique visitors
    • Requests
    • Data served
    • Data cached
    • Threats
    • Turnstile challenges
    • Turnstile interactive solves
    • Turnstile non-interactive solves
    • Turnstile unsolved
    • R2 class A operations
    • R2 class B operations
  • Moderators that have the ability to spam clean and view user's IPs get an extra option in the spam cleaner where they can temporarily ban the IP address(es) the spammer used in the last 30 days. The number of days to ban is an option you can set in the admin area (it defaults to 7 days).
  • Ability to backup and restore certain Cloudflare configuration (Access Apps, Firewall Rules, Firewall IP Access Rules, Firewall User Agent Blocking, Page Rules).
    • You can restore backups to a different zone (for example if you had extensive configuration for a zone, you could give another zone the same configuration through a backup restore).
    • Restoring a backup does not delete existing configurations (you are able to merge configuration into an existing config).
  • Cloudflare configuration is protected by a new admin permission, Manage Cloudflare.

  In exchange for being free, this addon has a single attribution link buried on the bottom of XenForo's Help -> Cookie usage page (there are no site-wide or footer links).
• Discussion

  This resource has a discussion thread on the forum where you can ask questions, report issues, and talk with the author and other users.

  Join the discussion (5)