Learn how to best set up your personal Cloudflare account as a Shopify merchant, in addition to Shopify’s Cloudflare security and performance benefits.
Overview
Cloudflare partners with Shopify to provide all Shopify merchant websites with Cloudflare’s performance and security benefits. Shopify merchants can also use their own Cloudflare account to proxy web traffic through Cloudflare with an Enterprise plan. Enabling Cloudflare with your own account in addition to Shopify’s Cloudflare benefits is called Orange-to-Orange (O2O). O2O applies both your and Shopify’s security settings.
Enabling O2O for your Shopify website
Enabling O2O is only available on the Cloudflare Enterprise plan.
To enable O2O on your account, you need either an A or CNAME DNS record that points your shop’s domain to the domain shops.myshopify.com. Orange cloud the record.
After adding the DNS record with proxy enabled, contact your account team to enable O2O on your shop domain.
Best practices
Certain Cloudflare features, when used with O2O, can interrupt the flow of traffic to your Shopify store or display incorrect data to your visitors. Review best practices before using the following features:
Caching
By default, caching of HTML pages is disabled. Merchants should not enable caching of HTML because Shopify performs their own caching outside of Cloudflare. Turning caching on may result in incorrect inventory being shown.
Page Rules
Incorrectly configured Page Rules that match the subdomain used for Shopify may block or distort the flow of ecommerce visitors to your website.
Workers
Similar to Page Rules, Workers may interrupt the flow of traffic to your website and consequently reduce revenue. Write Workers with caution. It is advisable to exclude the subdomain used with Shopify from the Worker route.
DNS CAA records
Shopify issues SSL/TLS certificates for merchant domains using Let’s Encrypt. If you add any DNS CAA records, you must select Let’s Encrypt as the Certificate Authority (CA) or HTTPS connections may fail.
Custom firewall rules
Shopify does not support Custom Firewall Rules, so use with caution.
Rate limiting
Shopify does not support Rate Limiting, so use with caution.
Argo Smart Routing
Argo Smart Routing is not compatible with O2O for merchants.
Load Balancing
Load Balancing is not compatible with O2O for merchants.
For additional help
If you are a Shopify merchant setting up your own Cloudflare account, contact your account team or Cloudflare Support for help in resolving issues. Cloudflare will turn to Shopify if there are technical issues that Cloudflare cannot resolve.