If you have looked into improving your website speed or security, you have probably encountered Cloudflare. It is one of the most widely used services on the internet, and for good reason: the free tier provides genuine, measurable improvements in both performance and protection. Here is how it works and how to decide if it is right for your site.
What Is Cloudflare?
Cloudflare is a reverse proxy, a content delivery network (CDN), and a web application firewall (WAF) - all in one service. The free plan combines all three capabilities.
When you add your domain to Cloudflare, you point your domain's nameservers to Cloudflare. From that point on, all traffic to your website passes through Cloudflare's network before it reaches your hosting server. Cloudflare stands between the open internet and your server, giving it the ability to cache content, filter traffic, and accelerate delivery.
How It Works
Here is the simplified flow:
- A visitor in Montreal requests your website
- Their DNS query resolves to a Cloudflare server near Montreal, not directly to your origin server
- If Cloudflare has a cached copy of the requested page, it serves it directly from Montreal - your origin server never receives the request
- If the content is not cached, Cloudflare fetches it from your origin server, serves it to the visitor, and caches it for future requests
Your origin server handles only a fraction of the traffic it would otherwise receive. Cached requests are served from whichever of Cloudflare's 300+ global data centers is closest to the visitor.
Key Benefits
Speed via CDN
Static content - images, CSS, JavaScript - is cached at Cloudflare's edge locations worldwide. Visitors receive these files from a geographically nearby server rather than your origin server, reducing load times regardless of where your visitors are located.
DDoS Protection
Distributed Denial of Service (DDoS) attacks flood your server with traffic to take it offline. Cloudflare absorbs this traffic at its own infrastructure scale before it reaches you. Even the free plan provides significant DDoS mitigation.
Free SSL
Cloudflare provides a free SSL certificate for traffic between visitors and Cloudflare. Combined with the SSL certificate on your hosting account (which dotCanada provides through AutoSSL), your site has end-to-end encryption.
Bot Filtering
Cloudflare identifies and blocks known malicious bots, scrapers, and crawlers. Legitimate search engines like Google are whitelisted and pass through normally. This reduces server load and filters out a significant amount of unwanted traffic.
Free vs Pro vs Business Plans
Free - CDN, DDoS mitigation, free SSL, basic bot protection, basic analytics. Sufficient for most small businesses and personal sites.
Pro ($20 USD/month) - Adds a Web Application Firewall (WAF) with managed rulesets, image optimization, and advanced bot management. Worthwhile for e-commerce sites or any site handling sensitive information.
Business ($200 USD/month) - Adds custom WAF rules, 100% uptime SLA, and advanced analytics. Typically for larger businesses with specific compliance or performance requirements.
The free plan is genuinely useful - not a crippled trial. Start there and upgrade only if you identify a specific need the free plan does not cover.
How to Add Cloudflare to a Domain at dotCanada
- Create a free account at cloudflare.com
- Click Add a site and enter your domain name
- Cloudflare will scan your existing DNS records and import them
- Review the imported records carefully - make sure all your existing DNS records are present before proceeding
- Cloudflare will provide you with two new nameserver addresses
- Log in to your domain registrar (or the dotCanada domain dashboard) and update your nameserver records to the Cloudflare nameservers
- DNS propagation typically completes within a few hours
Once active, Cloudflare will show traffic statistics in your dashboard and you can configure caching, security, and performance settings.
Things to Watch For
Caching issues during development. When you update your site and changes do not appear, Cloudflare may be serving a cached version. You can purge the cache in the Cloudflare dashboard under Caching > Configuration > Purge Everything.
Firewall rules blocking legitimate requests. On rare occasions, Cloudflare security rules may block a legitimate visitor or a service you use (payment processors, booking systems, form submissions). If customers report seeing a Cloudflare challenge page, check your security settings and add exceptions for known-good traffic sources.
SSL configuration. In Cloudflare SSL/TLS settings, set the mode to Full (strict) when your origin server also has a valid SSL certificate - which it does with dotCanada hosting. Using "Flexible" mode (which skips SSL between Cloudflare and your server) is less secure and can cause redirect loops.
Cloudflare is one of the most cost-effective improvements any website owner can make. Set it up once, and it quietly improves your site speed and security on every single request.
