Wordfence Cloudflare Firewall Sync

Syncs Wordfence IP blocks to Cloudflare's WAF for high-performance, DNS-level security.

---

Features

• Syncs IP blocks from Wordfence to Cloudflare Firewall Rules
• DNS-level blocking to reduce server resource usage
• Automatic cron-based syncing
• Manual "Sync Now" + "Cleanup Now" buttons
• Cloudflare rule reconciliation (detect drift)
• Expired block cleanup and retry logic
• Built-in logging and admin UI
• Multisite-compatible (per-site sync)

---

How It Works

• On sync, the plugin reads Wordfence's current block list
• It pushes valid IPs to Cloudflare's WAF using their API
• Expired or removed blocks are cleaned up from Cloudflare
• A database table tracks block history, sync logs, and retry attempts

---

Installation

1. Clone/download this repo:

   git clone https://github.com/yourname/wordfence-cloudflare-firewall-sync.git

2. Copy the src/ folder into:

   /wp-content/plugins/wordfence-cloudflare-firewall-sync/
   

3. Activate the plugin from the WordPress admin panel

4. Go to:

   Settings → Firewall Sync
   

5. Enter your Cloudflare API Token and Zone ID

---

Cloudflare Token Permissions

This plugin requires a restricted Cloudflare API token with:

• Zone → Firewall Services: Edit
• Zone → Zone Settings: Read
• Zone → Zone: Read

To generate a token:

1. Visit: https://dash.cloudflare.com/profile/api-tokens
2. Click “Create Token”
3. Set the permissions above for your domain
4. Copy and paste the token into the plugin settings

Do not share this token — treat it like a password.

GitHub Releases

You can also install the plugin from the .zip file attached to each GitHub Release.

---

Dev Features

• Admin panel with sync status and logs
• CLI-ready internal architecture
• GitHub Actions for automatic zipping & releases
• Makefile for clean versioned tagging
• VS Code Dev Container

---

Roadmap

• Rule reconciliation fixes
• Visual sync/block stats
• Cloudflare error alerting
• Translation contributions

---

Contributions

PRs welcome. Please ensure coding style follows PSR-12 with the exception of following 1TBS.

To test:

make format
make pot

---

License

GPLv2 — same as WordPress.

---

Disclaimer

This plugin is not officially affiliated with Wordfence or Cloudflare. Use at your own risk.