Hi @jedimax, yes you can use Wordfence with Cloudflare as many of our existing customers do.
When using Cloudflare, you will need to select “Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only use if you’re using Cloudflare.” in Wordfence > All Options > General Wordfence Options. There’s a bit more information here: https://www.wordfence.com/help/dashboard/options/#general-wordfence-options
Different hosts can have different configurations of Cloudflare also: https://www.wordfence.com/help/dashboard/options/
Note that Cloudflare has several configurations including their own web server module that takes care of detecting the visitor IP address, so be sure to work with their technical support staff and read their documentation to determine which configuration you’re using.
I have seen the Cloudflare firewall needing your own site’s IP(s) adding to their whitelist. You may need to add these under Cloudflare’s “rules” and “tools” sections if you haven’t already. Your site’s IP can be found at Wordfence > Tools > Diagnostics > Connectivity > IP(s) used by this server.
Sometimes, we also see the Cloudflare firewall requiring Wordfence IPs to be added to the whitelist. Our IPs for reference can be found here: https://www.wordfence.com/help/advanced/#servers-and-ip-range
I hope that helps you out!
Peter.
