How to whitelist WordStress in CloudFlare Firewall

Even though we’re making sure that WordStress cannot be used with malicious intent by forcing the WordStress Companion tool to be installed on the target website, it doesn’t mean that services like CloudFlare do not see our requests are suspicious – we’re firing hundres of requests at the same time after all.

How to configure CloudFlare to whitelist WordStress requests?

CloudFlare has a great user interface to quickly set this up. Follow these steps to whitelist WordStress requests:

1. Login to your CloudFlare Dashboard
2. Select your website
3. Go to Security -> WAF -> Custom Rules
4. Click ‘Create rule’
5. Enter a name for your rule, like ‘Always Allow WordStress’
6. In the Field dropdown, select ‘Header’
7. Enter x-wordstress in the name field
8. Set the operator to ‘equals’
9. And enter true for the value
10. Scroll down to ‘Then take action…’
11. Select ‘Skip’ from the Choose action dropdown
12. Click the ‘Deploy’ button in the bottom right corner

That’s it! CloudFlare will now allow requests from WordStress. Make sure to disable the rule after you’re done load testing!