How to improve the performance

[Logseo]

How to improve the performance well and ask for direct advice on configuration steps. Because I am a person without professional knowledge. Thank you. Https://www.logseo.net

[Oxy]

You must know that no one here has time to explain step by step to you because the matter is complex and depends from web page to page as well as the platform it is on.

I can only give you a few links and on some of those pages you can click for additional info

• Hardenize Report: logseo.net
• https://pagespeed.web.dev/analysis/https-www-logseo-net/k975zc4di7?form_factor=desktop
• Yellow Lab Tools - Page Speed audit
• https://validator.w3.org/

• https://securityheaders.com/?q=www.logseo.net&followRedirects=on
• www.logseo.net SSL Security Test | ImmuniWeb

• https://tinypng.com/

How to protect your website that is on Cloudflare plus Logs

How to protect your website that is on Cloudflare ? (Last update Jan. 13. 2023.) Don’t expect that if you just set up the CF nameservers everything will be well. Cloudflare is a tool, that you need to understand, learn and put to work for you after proper configuration. We often have the opportunity here on the forum to see that some websites have been suspended for exceeding the limit and mostly this is caused by a bunch of bots doing a vulnerability scan and searching sensitive dire…

[Oxy]

Here one of the links I gave you reported this
and that’s because CF serves various forms of TLS
and some are no longer safe and do not meet certain criteria (e.g. TLS.1.0)

You want everything green ? A++

you can configure most of these security things on Cloudflare
so…

---

next

next (security headers)
you configure this according to your wishes
I just gave an example of where it is in CF

pay attention to X-xss
because you may find online suggestions on how to be 1, block and similar but
according to new research, it is better to put 0 (off) than to have it active.

• Should x-xss-protection default to “0” instead of “1; mode=block” · Issue #439 · github/secure_headers · GitHub
• Update: Cross_Site_Scripting_Prevention_Cheat_Sheet · Issue #376 · OWASP/CheatSheetSeries · GitHub

[Logseo]

The rule of “transform rules” I don’t quite understand, can you give me more info or how to install with a tutorial or - a link with more clear directions on this. The rest of the steps above I have completed and got 3 A++ when rechecked. Thank you

[Oxy]

Managed Transforms: templated HTTP header modifications

remember what I said about X-XSS

Don’t just blindly copy/paste !!
you have to understand every rule because otherwise you can block your website if you do something wrong.

Enforcing Security Headers with Cloudflare Transform Rules

[Logseo]

Permissions-Policy We detected an invalid directive, " accelerometar". As for this one, I’ve already set it up, like, learn and try it many times

[Logseo]

When I turn on Transform Rules, I get this error, when I turn it off, I don’t get this error. I have no knowledge on this matter and only follow Oxy’s instructions, but because I don’t understand Oxy’s instructions well, there are mistakes I hope seniors will guide me more carefully. Preferably require a complete installation. Due to an error in uploading pictures, I left the web address and image link
Https://logseo.net

Ảnh https://www.canva.com/design/DAFe1XwuUA4/vzyRIXDM3WuXIqN9vCFUlg/edit?utm_content=DAFe1XwuUA4&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton

[Oxy]

@Logseo

I hope seniors will guide me more carefully. Preferably require a complete installation.

complete installation ?
I told you something at the beginning…
and now you expect someone to sit down and study your website in the smallest details
and that it uses telepathy so that it reads your thoughts and desires and then suggests all the parameters that work flawlessly just for your website and all of that is served to you on a plate?

in my last post, the last link,it has additional explanations, so click on one of these

If you don’t know what you are doing and whether you need something or not, then sit down and learn first.

I specifically told you not to blindly copy/paste
and I see that you also added this (although you don’t know what you do)

best to turn off transform rules until you get to know your website and decide what you really want and how.