I regretted not using Cloudflare sooner, even though I had only heard the name. The reason is that in an era where AI can create websites, the biggest hurdles are publishing and security.
Have you ever seen the name Cloudflare on your timeline or in online articles?
But you probably don't know exactly what it does, right?
"Is it a server migration tool?"
"Can I not use it unless I can program?"
Many of you have probably thought that and quietly closed the screen.
In this article, I will explain what Cloudflare is, how to use it, and what to watch out for in three chapters.
I will explain every single technical term, so you can read with peace of mind even with zero knowledge.
*The Cloudflare specifications in this article are based on official documentation as of September 2026.
━━━━━━━━━━━━━━━━━━━━
Article Flow
━━━━━━━━━━━━━━━━━━━━
Chapter 1: What is Cloudflare? | The World's Strongest Backstage Protector
"I've been hearing a lot about Cloudflare lately, but what does it do?"
I get this question very often at study groups and on social media.
Many people must have seen the logo.
It's the orange cloud mark.
But surprisingly few people can explain what it can do.
Let me give you the conclusion.
Cloudflare is the "world's strongest backstage protector" that stands in front of your website and protects it.
It is not a tool for moving servers. You don't need to rebuild your existing site. It's a tool to simply place a sturdy gate in front of your current site.
For example, imagine a company office. In the back, there is a room where employees are working at their computers.
This is the website or server you created. In technical terms, it's called the "origin." It means the place where the original data is located.
What would happen if there was nothing at the entrance? Passersby would suddenly open the door to the workroom. If a large number of people rushed in at once, it would be impossible to work.
Pranksters might enter and mess up the documents on the desks. Computers might break, or the server might crash and stop working.
So, you place a solid security gate in front of the office. Visitors' reception and confirmation of business are all organized inside and outside the gate. If a suspicious person comes, they are asked to leave at the gate stage.
This "security gate placed in front" is the true identity of Cloudflare. In technical terms, it's called a "reverse proxy."
It's a difficult name, but in short, it's a "window that receives communication on your behalf in front."
When I first became an engineer, I tried to handle everything with a single server. I tried to do both displaying the screen and taking safety measures all within one server.
But every time access increased, the server became heavy, and warning alerts went off in the middle of the night. I spent my days opening my computer with a cold sweat, thinking, "The site might have crashed."
Cloudflare handles three main tasks.
The first task is guidance. It tells users around the world "This site is over here" at ultra-high speed. It performs the role of a signpost (DNS) for addresses at world-class speeds.
The second task is speeding things up. It stocks images and designs that look the same to everyone on shelves near users all over the world. In technical terms, this is called "caching." Instead of going all the way to the back workroom, it hands them over quickly from the nearby shelf, so the screen displays instantly. The server load is also reduced by 80% to 90%.
The third task is baggage inspection. It shuts out malicious attacks and massive amounts of access intended to crash the server. Cloudflare acts as a shield against internet harassment called "DDoS attacks."
Even more surprisingly, these basic functions can be used for free. Individuals can use the same massive protective wall used by major corporations worldwide for free.
This is the main reason why Cloudflare is chosen worldwide.
Now you understand that Cloudflare is the "strongest backstage protector" placed in front of a site.
Next, let's look at the basic steps to actually start using it.
Chapter 2: Basic Usage of Cloudflare | Connecting to Your Site in 3 Steps
You might feel that "the settings seem difficult."
You don't need to type difficult commands into a black screen.
The basic usage is just 3 steps. You just click through.
Let's look at them in order.
Step 1: Create a Free Account
First, create an account on the Cloudflare official website. All you need is an email address and a password.
You don't even need to register a credit card. Just by choosing the free plan, you can enter the management screen immediately.
Step 2: Register Your Domain
Next, enter the domain of the website you own (such as example.com). A domain is like a "signboard" or "address" on the internet. If you enter the domain name according to the on-screen instructions, Cloudflare will automatically read your current communication settings.
Finally, open the management screen of the company where you bought the domain. You rewrite the "name of the guide," called the nameserver, to the name specified by Cloudflare.
This is the task of switching the person in charge of the signboard, saying, "From now on, Cloudflare will be the guide."
I remember being quite nervous when I first did this. I was afraid that "if I change the settings, the site might become invisible."
But in reality, it was just a matter of copying the two names displayed on the screen and pasting them.
Step 3: Light Up the Orange Cloud
A list of settings will appear on the Cloudflare management screen. Check the "cloud icon" there.
Click the cloud to make it orange. Orange means "pass through the gate."
Now, the Cloudflare security gate is fully enabled.
That's all. You don't need to mess with the complex settings of the back-end server.
Switch the guide to Cloudflare and light up the orange cloud. With just that, Cloudflare's network in over 300 cities worldwide becomes a shield for your site.
Sites created with AI like Claude Code can also be safely published to the world using this procedure.
A small website created by an individual can gain the same level of protection as a large corporation. This is the best part of introducing Cloudflare.
Now that we've organized the three steps to start using Cloudflare.
Next, let's look at the "3 points of caution" that beginners often trip over.
Chapter 3: 3 Points Beginners Should Watch Out For | Pitfalls to Avoid
Cloudflare is very convenient, but there are things to watch out for.
If you press buttons without knowing how it works, unexpected trouble will occur. Among what I've seen in the field, there are three pitfalls that beginners are particularly likely to step into. Please check these three points before publishing your site.
Caution 1: Do Not Turn the Orange Cloud on for Email Settings
This is the most common trouble.
"After I put in Cloudflare, I stopped receiving any emails."
The cause is turning all the cloud icons in the management screen orange. The orange cloud is a gate for passing website communication.
Email delivery (settings called MX records) cannot pass through this gate. If you try to force it through, the email delivery will stop midway.
Set website settings (A or CNAME) to the orange cloud. Set email settings (MX) to the gray cloud to let them pass through. Just remember this color distinction.
Caution 2: Choose "Full (strict)" for the Communication Key
The second is the communication encryption (SSL) setting. This is the mechanism for safe communication by putting a "lock mark" at the top of the browser. The setting you should never choose on the Cloudflare management screen is "Flexible" mode.
This is a setting that encrypts from the visitor to Cloudflare, but does not encrypt from Cloudflare to the back-end server. A safe-looking "lock mark" appears at the top of the screen. But behind the scenes, the conversation is left bare and exposed. If someone snoops in the middle, your important passwords will be fully visible.
As a rule, please choose "Full (strict)." The ironclad rule is to connect with a single safe dedicated line from start to finish.
Caution 3: Do Not Put Screens That Change Depending on the Person on the Shelf
The third is the cache setting for speeding things up.
"If it makes the display faster, let's stock all the screens on the shelf!"
You must not save the entire site at once thinking that. If it's images or designs, there's no problem putting them on the nearby shelf.
But if you do this with the My Page screen after logging in or the shopping cart screen, it will be a major accident.
The My Page screen seen by Person A is saved on the nearby shelf. Immediately after, Person B, a different person, opens their My Page. Then Cloudflare quickly returns Person A's screen that is on the shelf. Person A's name and personal information will be displayed on Person B's screen.
When I was a novice, I was really careful when touching the cache settings. Because if you cause an accident even once, it becomes an irreparable credit issue.
Only put "quiet screens that look the same to everyone" nearby. Do not put "dynamic screens whose content changes depending on the person" nearby. As long as you follow this boundary, trouble will not occur.
Now you have grasped the three pitfalls that beginners should avoid. Finally, I will give you a inspection sheet and a gift that you can take home today.
[Free Open Chat Started]
So far, I have written about the basics and points of caution when using Cloudflare. I have made the "pre-publication check items" explained in this article into a sheet that you can use as is.
・Orange and gray cloud sorting quick reference table (decision rules to avoid confusion)
・Communication key and cache safety inspection checklist
・Cloudflare introduction 3-step memo for beginners
With just this, you can introduce it safely without hesitation. Here is how to receive it.
① Join the open chat below
② Add the official LINE as a friend from the guidance
③ Send "Backstage" (Urakata)
It will be delivered automatically.
https://line.me/ti/g2/pEpZQdEyn1BM5Zi2wqLBT2rZYpC0ZaOncIWTag
Summary: There is only one thing to do today
Creating a website and delivering it safely are different skills. With the advent of AI, the hurdle for creating sites has dropped amazingly.
But to safely deliver what you've made to the world, a solid backstage is essential. You don't need to prepare large-scale equipment. You just need to place the strongest backstage called Cloudflare in front.
You don't need to learn all the settings at once.
There is only one thing to do today.
"Open the Cloudflare official website and try creating a free account."
That's it. Open the dashboard and take a look at what the screen looks like. From that small step, the safety of your web development will change significantly.
The place where engineers over 30 can win is not in the amount of work, but on the design side. Rather than relearning every time a tool comes out, it's faster to be on the side that decides where to stop.
Both AWS and AI evolve really fast. Rather than chasing alone, it's faster to look at the logs of people who are trying it out in practice.
In my AI x engineer practice, I keep records not only of what I made but also of what broke and what I missed.
This benefit is the 5th one. Every time I write an article, I prepare a benefit! Please follow me so you don't miss out in the future! @dan_pro_man
