Cloudflare
Cloudflare integration
Cloudflare runs DNS for most stores we manage. It gives us fast DNS, bulk redirects for migrations, bot protection and edge rules without touching Shopify.
UPDATED OCT 2026 · SOURCES (5)
CLOUDFLARE INTEGRATION AT A GLANCE
COMPLEXITY
Medium
METHOD
TYPICAL SETUP
1–3 days
WHAT WE DO
Move DNS to Cloudflare, set up redirects and security rules, manage certificates and use Workers for edge logic on headless builds.
CATEGORY
Infrastructure
SETUP BY PLATFORM
How we set up Cloudflare
Shopify
Cloudflare on Shopify (DNS): Move DNS to Cloudflare, set up redirects and security rules, manage certificates and use Workers for edge logic on headless builds.
Shopify store builds →Shopify Plus
On Shopify Plus (DNS + rules): everything in Shopify, plus the Plus-only hooks (checkout extensions, B2B, Launchpad) where Cloudflare can use them.
Hydrogen
On a headless storefront (Hydrogen, Astro or Next.js) we connect Cloudflare through DNS/Workers and own the event and data mapping ourselves.
USE CASES
What teams use it for
Migration redirects
Thousands of legacy URLs redirected at the edge during a replatform.
Security
Bot and rate-limiting rules in front of the storefront and APIs.
Edge logic
Workers for geo-routing, A/B tests and headers on Astro and Next.js sites.
BEFORE YOU ADD IT
What to watch out for
PROXY
Do not proxy the Shopify domain
Shopify needs DNS-only records for the storefront; proxying breaks SSL.
CACHING
Cache rules on headless only
Edge caching applies to self-hosted storefronts, not Shopify-hosted pages.
ACCESS
Lock down the account
Use 2FA and scoped API tokens; DNS is the keys to the store.
05
Cloudflare on Shopify, in practice
Shopify already runs on its own CDN, so Cloudflare on a Shopify store is about DNS, security rules and the pages that live outside Shopify — a headless storefront on Workers or Pages, a marketing site, or a legacy domain being redirected.
We manage DNS in Cloudflare for clients who want one place for every record, set the proxy off for the Shopify apex and www records so Shopify's SSL and CDN work as designed, and use Cloudflare for what it does best: bot and WAF rules in front of a headless storefront, bulk redirects for a migrated domain, email routing and the occasional Worker for an edge redirect or a geo rule Shopify cannot express.
The mistake we fix most often is proxying Shopify through Cloudflare, which breaks certificate renewal and sometimes checkout. The second is a domain migration where thousands of old URLs were left to 404 because nobody set up bulk redirects. Both are an afternoon to fix and a month of rankings to lose.
Can we use Cloudflare with Shopify?
Yes, for DNS, security rules and pages outside Shopify. Shopify already runs on its own CDN, so we use Cloudflare for DNS, bulk redirects and bot rules rather than caching Shopify pages.
Should the Shopify record be proxied?
No. Shopify needs DNS-only records for the apex and www records. Proxying them through Cloudflare breaks certificate renewal and sometimes checkout, so we set the proxy off for both.
Can Cloudflare handle migration redirects?
Yes. Bulk redirects handle thousands of legacy URLs at the edge during a replatform. Skipping them leaves old URLs to 404, and that costs rankings.
What are Workers used for?
Edge logic Shopify cannot express, such as geo-routing, A/B tests, headers and edge redirects, mainly on Astro and Next.js headless storefronts.
You've reached the end, so now…
Tell us what you're selling.
Send us your store. Within one business day you get a short Loom from a senior: the three things we'd fix first, what it would cost, and whether we're the right team for it.
- No pitch deck, no discovery-call theatre
- You keep the audit whether or not you hire us
- Fixed-scope quotes, no hourly surprises
Prefer to talk? Book 20 minutes with Haniel or call +1 855-764-4977