Is CloudFlare bad for SEO?
-
I have been hit by DDoS attacks lately...not on a huge scale, but probably done by some "script kiddies" or competitors of mine.
Still, I need to take some action in order to protect my server and my site against all of this spam traffic that is being sent to it. In the process of researching the tools available for defending a website from a DDoS attack, I came across the service offered by CloudFlare.com.
According to the CloudFlare website, they protect your site against a DDoS attack by showing users/visitors they find suspicious an interstitial that asks them if they are a real user or a bot...this interstitial contains a Captcha that suspicious users are asked to enter in order to visit the site.
I'm just wondering what kind of an effect such an interstitial could have on my Google rankings...I can imagine that such a thing could add to increased click-backs to the SERPs and, if Google detects this, to lower rankings.
Has anyone had experience with the DDoS protection services offered by CloudFlare, who can say a word or two regarding any effects this may have on SEO?
Thanks
-
i know this is a old thread and i see where people says cloudflare dont have a bad effect but i need someone to tell me more about it because am scare loosing all my hardwork on my Music niche
-
Wanna know if cloudflare depends on some country and unavailable in some countries? thinking of using this as well on my subscene page
-
it should not negatively impact your ranking in any way shape or form. If you are seeing the speed increase from it it will most likely be a positive effect on your rankings. Google no longer uses IP's so it's fine. to have a reverse proxy in front like CloudFlare. you like it and you think it's fine to help move site, by all means, try it out.
It will only have a negative impact on your rankings if you do something that's almost impossible in block Google Bot with your firewall which is not going to happen unless you really start getting technical with the WAF, in other words, don't worry about it
sincerely,
Tom
-
Seriously I wanted to go for cloudflare too on my music blog because they make site super fast but I'm scared to loose my ranking
Should I or not
-
I agree that they are much better than they where I’m still using Incapsula & Fastly.
I use CloudFlare Enterprise for China.
Glad to hear you’re doing well!
Tom
-
We have hundreds of sites managed through Cloudflare. So far the good far outweighs the bad, although I am beginning to suspect bad neighbors could certainly negatively influence ranking. We have a few comparisons ongoing. We will know for sure in the coming months. I only wish Cloudflare would take a higher stance about which sites it is willing to get in bed with.
Here https://sarkariresultsite.com/ is the our new website which is managed by Cloudflare.
-
With CloudFlare the challenge page you refer to is dependent on your security questions. My knowledge of DDos mitigation is not great, but what I do is have the CloudFlare security settings on Low. If I was to come under attack, I would react and put the security settings on high for the duration.
If the DDos is bad, than you may need the expensive plan that has specialist DDos protection.
today i transfer my site https://sarkariresultsite.in on cloud flare with cloudflare flexible SSL
-
Generally speaking, CAPTCHA based DDoS protection is not advised as it will drive away clients and DDoS bots alike.
Same goes for delay pages.Also, DDoS attacks are swift and can bring site/server down in minutes so the manual approach is risky and probably less effective than it sounds on paper. Even if you are always near your PC, like many of us here are, you`ll still be exposed on weekends, nighttime, launch breaks, etc... Hackers know that and will exploit it. (favorite attack time - VERY EARLY Sunday mornings... )
You should also consider that DDoS can serve as a means to an end. It's often used to "soften" the protective layer to hack the database, inject the site with backdoors, deface or delete it and so on and so forth.
What you really need is a combination of auto-triggering and transparent mitigation, which shies away from intrusive mitigation methods in favor of more subtle progressive challenges (i.e. JS challenge combined with reputation and behavior monitoring).
This may sound fancy but it really this is the emerging industry standard and growing competition between vendors actually drives costs down. -
With CloudFlare the challenge page you refer to is dependent on your security questions. My knowledge of DDos mitigation is not great, but what I do is have the CloudFlare security settings on Low. If I was to come under attack, I would react and put the security settings on high for the duration.
If the DDos is bad, then you may need the expensive plan that has specialist DDos protection.
-
Hi
SEO wise, there are many things to consider before on-boarding a CDN service and bot filtering is one of them.
I've covered the topic in 2 blogs posts about a year ago:1. CDN's SEO related advantages 2. CDN's SEO related myths (and possible issues to consider)
PS: I work for CDN-based security and acceleration service provider - Incapsula.
-
Hi
http://www.neustar.biz/enterprise/ddos-protection
https://www.verisigninc.com/en_US/forms/ddosattackservice.xhtml
http://www.incapsula.com/ddos/anti-ddos-protection
What can happen
If you want a true built for enterprise host that actually has a perfect record and will care more than any other that I know of about security, up time and would you benefit yes you would fire host is the best they offer built-in DoS/DDoS mitigation
2 answer your question about cloud flair I do not feel adding them will give you the same advantages as a enterprise level hosting company.
For instance I believe fire host to be the best let's say you think liquid Web managed dedicated with layer 7 DDoS protection is better.
Well that's up to you and me to make our decisions. Based on past history and our own opinions of the companies.
If you where to add CloudFlare
you would receive CloudFlare layer 7 DDoS protection only once you started paying $200 a month of free cloud for a service is not a system that will protect you against an attack
http://www.cloudflare.com/features-security
There content delivery network as they call it is simply a reverse proxy it's not what other people would call a true CDN once again the issues would be a large with the base plan http://www.cloudflare.com/features-cdn
Your so-called anti-cast DNS CloudFlare says is standard changes your IP address by definition any cast and DNS does not change your IP. There are some methods two get around this but it's not simple.
A $200 a month "CloudFlare Railgun origin network optimizer"
http://www.cloudflare.com/railgun
Will do the same thing as any high end content delivery network as far as fixing the front end code edge cast will do that as will NetDNA, Akamai, numerous others so may I can't list them all.
Information on Akamai stopping attacks
The unique thing is edge cast is very fast so is Akamai you can purchase a Akamai CDN from liquid Web for $120 a month with a terabyte of bandwidth that's a lot.
It will do more than the CloudFlare Railgun including help stop DDoS attacks it will do it faster and if were to spend the money on a liquid Web VPS with DDoS you would be at about $175 a month or you could start off on the base package with fire host and that would cost you $200 a month however for a month $250 you can you can add edge casts outstanding content delivery network
I have accounts with liquid Web and fire host I use fire host primarily and really do not do much with liquid Web however both of them are better than CloudFlare in terms of protection and in terms of speed.
http://www.thewhir.com/web-hosting-news/cn-domain-service-restored-following-massive-ddos-attack
I of course have tried to use CloudFlare and found it worthless to me.
My main point is for $200 a month you can get a much faster and safer setup.
The other thing to remember when CloudFlare said it blocked a 300 GB attack that is considered fictitious and debatable by many in the
industry myself included. I don't think switches that At 10 Gb can do that when there's only two pointing at it
Here is a link from cloud flair talking about how good of a job they did saving the Internet and stopping the biggest attack ever. They did not succeed in keeping Spamhaus online so they did not stop the attack in my opinion.
http://blog.cloudflare.com/the-ddos-that-almost-broke-the-internet
"On Monday, March 18, 2013 Spamhaus contacted CloudFlare regarding an attack they were seeing against their website spamhaus.org. They signed up for CloudFlare and we quickly mitigated the attack." & said there was "more then than 300Gbps of attack traffic"
The other big difference between CF and everyone else is they utilize there any cast network to accept the attack this slows down any one on that network instantly as it did when "the attack that almost broke the Internet happened"
Instead of moving the traffic to a private cloud and dealing with it so it would not affect others using their service they basically did not have any regard for their users at that time.
"The attackers were quiet for a day. Then, on March 22 at 18:00 UTC, the attack resumed, peaking at 120Gbps of traffic hitting our network. As we discussed in the previous blog post, CloudFlare uses Anycast technology which spreads the load of a distributed attack across all our data centers. This allowed us to mitigate the attack without it affecting Spamhaus or any of our other customers. The attackers ceased their attack against the Spamhaus website four hours after it started."
CloudFlare actually spread the attack on to their own customers this is something that harmed everyone using their service that day for I believe five days total.
http://www.theregister.co.uk/Print/2013/03/28/spamhaus_mega_ddos_little_collateral_damage/
http://www.webhostingtalk.com/showthread.php?t=1065748
Nearly half of DDoS attacks in the first half of 2013 are now larger than 1Gbps, up from 13.5 percent in 2012,
http://www.thewhir.com/web-hosting-news/prolexic-stops-massive-dns-reflection-attack
largest DNS reflection attack ever recorded,” which peaked at 167Gbps.
If this is now the largest what was the 300gbps?
It is not bad for SEO in itself however using a CAPTCHA page if it thinks your visitors is a attack or bot is very bad & happens allot I know changing your IP address can cause some issues. What I'm getting at is if you want the type of protection you were talking about there are much better methods of going about getting it.
Try them out see what you think you can really only learn more about it.
I hope this helps you,
Thomas
Got a burning SEO question?
Subscribe to Moz Pro to gain full access to Q&A, answer questions, and ask your own.
Browse Questions
Explore more categories
-
Moz Tools
Chat with the community about the Moz tools.
-
SEO Tactics
Discuss the SEO process with fellow marketers
-
Community
Discuss industry events, jobs, and news!
-
Digital Marketing
Chat about tactics outside of SEO
-
Research & Trends
Dive into research and trends in the search industry.
-
Support
Connect on product support and feature requests.
Related Questions
-
SEO- Manufacturer v Distributor
In respect to a safety clothing manufacturer manage SEO on behalf of, I've noticed that product distributors own 85% of the page 1 SERPs leaving product manufacturers such as my client largely under represented for the vast majority of search queries such as 'safety boots'. Love to hear your opinion on why this is and how I can combat it? TIA!
Intermediate & Advanced SEO | | resolved0 -
Keyword in URL - SEO impact
Hi, We don't have most important keyword of our industry in our domain or sub-domain. How important it is to have keyword in website URL? Most of our competitors pages with "keyword" urls been listing in SERP. What is back-links role in this scenarion? And which URL have more advantage? keyword in sub-domain or page with keyword. Like for "seo" keyword..... seo.example.com or example.com/seo
Intermediate & Advanced SEO | | vtmoz0 -
Is it bad for SEO to have a page that is not linked to anywhere on your site?
Hi, We had a content manager request to delete a page from our site. Looking at the traffic to the page, I noticed there were a lot of inbound links from credible sites. Rather than deleting the page, we simply removed it from the navigation, so that a user could still access the page by clicking on a link to it from an external site. Questions: Is it bad for SEO to have a page that is not directly accessible from your site? If no: do we keep this page in our Sitemap, or remove it? If yes: what is a better strategy to ensure the inbound links aren't considered "broken links" and also to minimize any negative impact to our SEO? Should we delete the page and 301 redirect users to the parent page for the page we had previously hidden?
Intermediate & Advanced SEO | | jnew9290 -
Seo for international sites
Hello, I have a question for the group, our main US site- http://www.datacard.com is utilized to move content to other regional sites like http://www.datacard.co.uk/ and http://www.datacard.fr/ and http://www.datacard.com.br/. Anyhow, we essentially have some regional content on those sites, but for ease of maintaining and updating the content we have a company translate this for us and then undergo an in country review for local people in our company to review the content. That being said the meta descriptions, titles, code, everything gets translated to that language. I know there are issue for SEO for these purposes as we get much better rankings with http://www.datacard.com. The regional sites are newer so this could be part of it. We don't have an agency helping us with SEo and i get a lot of questions on what can be done internally for this for regional sites with our current structure. Any tips you have? It would be greatly appreciated! Laura
Intermediate & Advanced SEO | | lauramrobinson320 -
Double hyphen in URL - bad?
Instead of a URL such as domain.com/double-dash/ programming wants to use domain.com/double--dash/ for some reason that makes things easier for them. Would a double dash in the URL have a negative effect on the page ranking?
Intermediate & Advanced SEO | | CFSSEO0 -
Brand sections performing badly in SERP's but all SEO tools think we are great
I have had this problem for some time now and I've asked many many experts. Search for Falke in Google.co.uk and this is what you get: http://www.sockshop.co.uk/by_brand/falke/ 3rd Our competitor
Intermediate & Advanced SEO | | jpbarber
http://www.mytights.com/gb/brand/falke.html 4th Our competitor http://www.uktights.com/section/73/falke 104th this is us ????? 9th for Falke tights with same section not our falke tights section? All sites seem to link to their brand sections in the same way with links in the header and breadcrumbs, Opensite exporler only shows 2 or 3 internal links for our compertitors, 1600+ from us?
Many of our brand sections rank badly Pretty Polly and Charnos brands rank page 2 or 3 with a brand subsection with no links to them, main section dosn't rank? Great example is Kunert, a German brand no UK competition our section has been live for 8 years, the best we can do is 71st Google UK, 1st on Bing (as we should be). I'm working on adding some quality links, but our comtetitors have a few low quality or no external links, only slightly better domain authority but rank 100+ positions better than us on some brands. This to me would suggest there is something onpage / internal linking I'm doing wrong, but all tools say "well done, grade A" take a holiday. Keyword denisty is similar to our competiors and I've tried reducing the number of products on the page. All pages really ranked well pre Penguin, and Bing still likes them. This is driving me nuts and costing us money Cheers Jonathan
www.uktights.com1 -
SEO on page content links help
I run a website at the bottom we have scroller box which the old SEO guy used to contain all of the crap content so we can rank for keywords not on the page and put all of the links in to spread the link juice into the other inner category pages (some of these pages are only listed on our innerpages otherwise). We are trying to remove this content and add decent content above the fold with relevant long tail keywords in (it is currently decent but could do with expanding if we are removing this large chunk of text in theSEO box and some long tail keywords will be missing if we just remove it) we can add a couple of links into this new content but will struggle to list the category pages not on the left hand navigation. If we were to list all of the pages in the left hand nav would we dilute the power going to the main pages currently or would we be in the same position we are now? For example at the minute I would say the power is mainly going to the left hand nav links and then a small amount of power to the links in the SEO content if we put these into the nav will it not dilute the power to the main pages. Thank you for your time and hopefully your help.
Intermediate & Advanced SEO | | BobAnderson0 -
The use of subdomains to improve SEO?
A clients website which provide a number of trade services which have a page for each service they provide for example: carpentry or electrician or plumbing etc. currently these pages are found at domain.co.uk/bathrooms/ bathrooms.html I am trying to optmise each page better as they are competing with other sites who for example sell bathrooms rather than bathroom installers or plumbers. As part of the on page optimisation I plan to change the page names and directory structure. I had an idea to split the website down into subdomains for various sections i.e for all their services Create a sub domain such as http://plumber.domain.co.uk 2.) upload the relevant content (in this example the plumbing page) to the sub domain location 3.) correct all the links to absolute URLs for each sub domain / Will this help target better use of keywords in the URL in terms of SEO efforts ? hope it makes sense thanks Darren
Intermediate & Advanced SEO | | Bristolweb0