463 – Understanding how Cloudflare boosts WordPress security and performance with Jonathan Jernigan

·51 min·5 clips

How does Cloudflare's 'edge' firewall stop spam and attacks before they ever touch your WordPress site?

The episode begins with host Nathan Wrigley introducing guest Jonathan Jernigan, a WordPress educator and course creator. Wrigley frames the discussion around the common experience of using Cloudflare without fully understanding its mechanisms. Jernigan provides background on his 12 years in the WordPress space and his focus on creating courses and a Generate Blocks community. He then explains Cloudflare's fundamental purpose: consolidating domain, DNS, and security management into one dashboard. Jernigan uses an analogy of a house with a security guard to describe how Cloudflare acts as a firewall, filtering traffic before it reaches the hosting server. He highlights Cloudflare's global network of over 300 data centers that cache site content for faster delivery worldwide. The conversation addresses how Cloudflare sustains its extensive free tier, suggesting revenue from large enterprise clients funds the service. A key case study involves a real estate law client with a four-letter domain that was inundated with spam; implementing Cloudflare reduced spam by 95%. Jernigan introduces the concept of the 'plumber rule,' a firewall configuration that blocks traffic from countries where a business has no legitimate customers. He discusses Cloudflare's 'managed challenge' feature, which he used to stop fraudulent checkouts on a payment calendar site. The episode covers performance aspects, noting that Cloudflare's default caching settings are sufficient for most users and that Jernigan does not use additional WordPress security plugins. He reveals Cloudflare's 'Access' product, which provides free two-factor authentication by intercepting login attempts before the WordPress admin page loads. The discussion touches on other Cloudflare services like Workers for hosting static sites and R2 for backups. Jernigan mentions his Cloudflare course, designed for beginners to understand DNS fundamentals and practical firewall rules. The episode concludes with information on where to find the course and Jernigan's presence in the WordPress Admin Bar community.

As heard by us

A grounded review of Cloudflare's security scale, enterprise economics, and candid incident reporting.

Cloudflare's WordPress story lands as a practical look at scale, security, and the business model behind protection. Jonathan Jernigan frames free users and enterprise clients as parts of the same wider system, with bot attacks, DDoS attacks, firewall services, and massive…

Read the full review in PlayNext →

Why you'd press play

You want to know what sits behind WordPress security when Cloudflare, bots, DDoS attacks, and massive infrastructure enter the room.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from WP Builds