Your network. Your rules.

Manage authoritative DNS, origin routing, and access protection in one place.

Connect securely

Use your configured HTTPS management domain or an SSH tunnel to the server’s loopback port 9080. Unlock the panel with your management API token.

DNS & application gateway

Overview

Route traffic. Set the rules. Keep control.

Provider keys

ConfigurationChecking…Waiting for server status

Managed domains—Edge address unavailable

Authoritative nameservers

Set these at your registrar. Nameserver hostnames may also need registrar glue records.

Your first domain starts here.

Add a domain and its origin IP, then update its nameservers at your registrar.

Visitor activity

One row per IP, including this domain and its enabled www hostname. Visits count HTML page navigations allowed through the edge. Assets and challenge redirects do not add visits. Requests include assets and blocked attempts.

Time window

Challenge mode at the time

Visits—

IP addresses—

Requests—

Verifications passed—

Protection comparison

Counts stay with the mode, strength and policy version used when the event occurred. Verified counts completed challenge verifications. Use these counts alongside your own investigation; passing a challenge does not prove a visitor is human.

Mode	Strength	Policy	Visits	Requests	Allowed	Challenged	Blocked	Errors	Verified

History is kept for 30 days and starts after this update. Allowed means the protection gate permitted a request; it does not confirm the origin loaded successfully. An IP may represent several people or a proxy. Country and ISP use your saved ip-api Pro key and can show Unknown while lookup is pending or unavailable.

Domain settings

New domain

01 Domain & origin

Domain name

Enter the domain only, without https:// or a path. Existing domains cannot be renamed.

Origin IP address

Origin TLS server name

Must match the origin’s trusted TLS certificate.

Origin protocol

Origin port

Include wwwAutomatically manage www alongside the domain. Proxy traffic through this serverDNS points to this edge server; HTTPS is provisioned automatically. Allow origin certificate validationAllow specific GET/HEAD validation files through country and challenge checks, including over HTTP without an HTTPS redirect. For the first cPanel certificate, use an HTTP origin on port 80. HTTPS origins must already have a valid certificate.

02 Access protection

Browser challenge

Choose Turnstile for Cloudflare’s hosted browser verification. Configure its widget in Managed mode.

Allow only these countries

Comma-separated ISO two-letter codes. Empty allows every country. Use GB for the United Kingdom.

Provider setup

Add server-default keys in Provider keys below. Existing named profiles remain available. Saved secret keys are never returned to this panel.

Allow requests if country lookup failsOff by default: an unavailable lookup blocks access when a country allowlist is active.

Requests per minute, per client IP

0 disables the domain request rate limit.

Burst capacity

Clearance lifetime (seconds)

Server defaults

Provider keys

Save your verification and IP lookup keys here. Then choose a browser challenge, country rules, or invisible IP risk checks for each domain.

These defaults apply to domains using “Server default”. Named credential profiles stay unchanged. Configured means saved, not verified with the provider. Secret keys are never displayed after saving.

Overview

Your first domain starts here.

Visitor activity

Protection comparison

New domain

Provider setup

Additional DNS records

Provider keys

Cloudflare Turnstile

hCaptcha

Google reCAPTCHA v2

ip-api Pro

Control your edge.

Overview

Your first domain starts here.

Visitor activity

Protection comparison

New domain

Provider setup

Additional DNS records

Provider keys

Cloudflare Turnstile

hCaptcha

Google reCAPTCHA v2

ip-api Pro