Cloudflare Zaraz | Impact on Wordfence

  • Resolved generosus

    (@generosus)


    2 years, 4 months ago

    Good Day,

    Recently, Cloudflare launched a new set of Privacy features within their module, “Zaraz”, which may impact the detection and/or blocking capabilities of Wordfence.

    For your convenience, these are the main Zaraz Privacy mode features we’re referring to.

    Questions:

    (1) Are you guys aware of this?

    (2) If yes, have you performed any type of testing to determine the impact of Zaraz Privacy on your plugin?

    (3) What are your recommendations concerning the use of Zaraz Privacy and your plugin?

    (4) Any plans to issue a blog to address this topic?

    Thank you!

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @generosus, thanks for highlighting those features.

    We’ve taken a look and would definitely not recommend using the features shown, except the last one in some cases:

    Remove URL query parameters would break a fair number of WordPress features, including searches and much of wp-admin, unless they allow exceptions. This may have an impact on scans also.

    Trim IP addresses will cause IP detection to work incorrectly or fail entirely.

    Clean User Agent Strings probably won’t cause significant issues, but would limit what is shown in Live Traffic, and might prevent some blocking.

    Remove external referers may not cause problems, except if you’re blocking hits using the Referrer “Custom Patterns”, but would prevent referers from being shown in Live Traffic.

    We have flagged these points with our documentation team who are looking into highlighting them for consideration with customers using Cloudflare. I would expect this addition for support purposes is more likely than a blog post right now, but of course this may come up during internal discussions, so never say never.

    Thanks,

    Peter.

    Thread Starter generosus

    (@generosus)

    Hi @wfpeter,

    Perfect answer. Makes sense.

    As always, thank you for your guidance and excellent support.

    Cheerio!

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Cloudflare Zaraz | Impact on Wordfence’ is closed to new replies.