Cloudflare Configuration Guide: Allowlist Partner Backend IP
Our backend system communicates with your WordPress/WooCommerce site via REST API to sync products and orders. Due to high-traffic events, our fixed outbound IP address sends multiple rapid requests, which currently triggers a 403 Forbidden error from your Cloudflare security settings.
To resolve this issue and prevent our automated system from being flagged as a bot or a DDoS attempt, we kindly ask your IT/Security team to create a dedicated WAF Custom Rule (Skip Rule) in your Cloudflare dashboard.
Configuration Steps for Cloudflare Admin
Please follow these steps to allowlist our static IP address:
- Log in to your Cloudflare Dashboard and select your website zone.
- Navigate to Security > WAF > Custom rules.
- Click on the Create rule button.
- Configure the rule with the following details:
- Rule name: Allowlist - Partner Backend Integration
- If incoming requests match... (Expression Builder):
- Field: IP Source Address
- Operator: equals
- Value: 108.143.170.153
5. Choose action: Select Skip from the dropdown menu.
6. Log components to skip (Check the following boxes):
- All remaining custom rules
- Rate limiting rules (Crucial to prevent blocks during high-traffic order syncing)
- Super Bot Fight Mode (Prevents automated API calls from triggering bot challenges)
7. Click Deploy at the bottom right to apply the changes.
Our Backend Details
- Connection Type: REST API HTTPS requests (WordPress/WooCommerce endpoints)
- Our Fixed Outbound IP: 108.143.170.153
Troubleshooting
If you deploy the rule and we still experience 403 errors, please check your Security > Events log. You can filter the activity by our IP address to see exactly which Cloudflare security layer (e.g., Managed Rules, Managed Challenge, or Firewall) is intercepting our requests.