NinjaFirewall + FlyingPress slows site down

  • Resolved sunnyt13

    (@sunnyt13)


    1 year, 1 month ago

    I have an install with both NinjaFirewall and FlyingPress enabled.

    When purging cache and preloading in FlyingPress, it takes super long and brings the entire site to a crawl.

    After doing some testing, I discovered that this only happens with NinjaFirewall enabled.

    What’s interesting is that I have other sites with both plugins active and there aren’t any issues.

    I contacted FlyingPress’ support, and they said:

    “Yes, NinjaFirewall does seem to cause conflicts with preloading the URLs specially when making requests to the admin-ajax.php. We would suggest checking this with their team is they can add some exclusion to their firewall for FlyingPress. If they need any help or assistance, feel free to let us know, and we would be more than happy to assist.”

    Would it be possible to get an exclusion?

    Thanks!

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Contributor bruandet

    (@bruandet)

    1 year, 1 month ago

    Did you look in the firewall log if the requests were blocked (Logs > Firewall Log) ?
    In the Firewall Policies page, there’s a “WordPress AJAX > Protect admin-ajax.php against bots” option. Is it enabled (it isn’t by default)?

    Thread Starter sunnyt13

    (@sunnyt13)

    1 year, 1 month ago

    That’s what’s weird.

    There are no FlyingPress related requests in the log, and “Protect admin-ajax.php against bots” is not enabled.

    But the issue doesn’t exist when Firewall Protection is set to Disabled.

    Plugin Contributor bruandet

    (@bruandet)

    1 year, 1 month ago

    It may be an issue with PHP sessions.
    Try to switch to NinjaFirewall sessions instead by creating (or editing) a .htninja configuration file: https://blog.nintechnet.com/ninjafirewall-wp-edition-the-htninja-configuration-file/#user_session

    Thread Starter sunnyt13

    (@sunnyt13)

    1 year, 1 month ago

    Enabling NF Sessions resolved the issue. Thank you!

    Is there any downside to this approach that I should be aware of? Or are there any exclusions that could be made on your end so that this doesn’t need to be done for every new site moving forward?

    Thanks again

    Plugin Contributor bruandet

    (@bruandet)

    1 year, 1 month ago

    I’m not aware of any downside: it acts like PHP sessions but without locking. That suits NinjaFirewall.
    That feature was added a few months ago, hence it is not enabled by default yet, but soon it will be the default session type used by the firewall.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘NinjaFirewall + FlyingPress slows site down’ is closed to new replies.