Removing sections of website from Cloudflare CDN

We’ve just moved a website onto Cloudflare’s CDN on Monday this week, but our payment provider has gone from flagging 2/3 suspected spam payments a week to upwards of 40 in one day. This is due to traffic getting routed through the same Cloudflare IP addresses. Is there any way to completely remove the payment area (which sits on the same domain as our main website) from Cloudflare’s CDN so that this stops happening?

List item

?

Not that I’m aware of - proxying is done on the DNS level which isn’t aware of paths.

I don’t know why your payment provider would see that as an issue - I’ve never heard of that though.

As @KianNH says, you can’t do anything simple at Cloudflare but there are other solns such as having you backend using X-Forwarded-For (or True-Client-IP if on your plan) instead of the Cloudflare proxy IPs you currently see.

Here’s a nice summary of how to restore ‘real’ visitor IPs when using Cloudflare:

https://support.cloudflare.com/hc/en-us/articles/200170786-Restoring-original-visitor-IPs

An alternative soln is to move payment gateway to a different subdomain on which proxying is not enabled, too.

TL;DR there’s ways and means but they’re not click, click, boom.

2 Likes

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.