Webflows documentation for Cloudflare specifies that they allow DNS-only, which will break our Web Application Firewall.
Is there a solution to this?
Yes. Rely one the built in security provided by Webflow hosting. Just use DNS only.
Forgive me if this is a newb question but does anyone know if you can use cloudflare apps for other cnames/subdomains pointed at other hosts, but still have DNS only mode for your root and www cname so that your main site can be on webflow without a problem? Use case is we have a cname “portal.oursite.com” which points to another system and need to enable cloudflare apps for that.
Webflow’s built-in security doesn’t address http security headers though.