This Summer season, boost your WHMCS with premium modules and save 15% off.

Use promo code: SUMMER2026

Automated Cloudflare Zone Management Inside WHMCS

Cloudflare Server For WHMCS

Cloudflare Server is a WHMCS provisioning (server) module that sells Cloudflare as a product. The moment a client orders it, the module automatically creates a Cloudflare zone for the service's domain and applies your configured SSL, security, and cache defaults. Suspend, unsuspend and terminate map directly to pausing, resuming and deleting the zone. Clients manage their own zone, DNS, security, cache, firewall, and analytics right from the service page, and admins get the exact same controls on the admin service tab, with action buttons, live setting dropdowns, and popup panels for every feature. Account credentials and defaults are shared with the companion Cloudflare Manager addon, so nothing needs to be entered twice.

Admin Area Features

• Zone Creation Defaults on the product's Module Settings page: Zone Type (Full DNS or Partial/CNAME), Default SSL Mode, Default Security Level, Default Cache Level, and an Auto-scan DNS on Zone Creation toggle.
• Product Type flags (Shared Hosting, Reseller Hosting, Server/VPS, Other) stored per product for reporting/organisational purposes.
• Configurable Options: one click to expose Zone Type, SSL Mode and Security Level as WHMCS configurable options clients can choose at checkout.
• Client Area Features per product: toggle which of DNS Records, Security, Cache & Performance, Firewall and Analytics tabs are visible to that product's clients (Overview is always shown).
• Cloudflare Account section at the top of the same settings page: Account ID, Server IP for initial DNS records, Auto-update Nameservers, and the same Cloudflare Tenant Account options (email, Global API Key, unit ID with a Fetch helper, account type, naming pattern) found in the Cloudflare Manager addon — saving here updates the addon too, and the reverse.
• Client Area Styling settings on the same page: theme mode, light/dark colours, and a per-variable mapping table for the active WHMCS template, with shipped defaults for Lagom, Twenty-One, Six and Nexus.
• Admin service tab, opened from Clients → Products/Services, showing:
  • Action boxes for Enable Zone, Disable Zone (confirm), Purge Cache (confirm) and Activation Check, plus a direct Cloudflare dashboard link.
  • A Zone Information table — name, status, plan, zone ID, nameservers and record count — with copy buttons.
  • Popup panels for DNS Records (view/add/delete), Security (live setting dropdowns), Cache (live dropdowns plus purge everything or by URL), Firewall (IP access rules and WAF rules) and Analytics — the same features and layout the client sees.
• Server "Access Hash" field is relabelled Cloudflare API Token on the Add/Edit Server page, with a matching placeholder and permission hint.
• Automatic module updates through the WHMCS daily cron, ionCube-aware, logged to the Activity Log.
• License banner: since this module has no license key of its own, an admin banner appears whenever the Cloudflare Manager addon's license is missing or invalid, linking straight to that addon's Configure page, with a sync icon to re-check live.

Client Area Features

• Overview tab: zone status, nameservers with copy buttons, quick action boxes (Enable, Disable, Purge Cache, Activation Check, open Cloudflare dashboard), and management links to every other enabled tab.
• DNS Records: add, edit, and delete records from the service page.
• Security: Security Level, SSL Mode, Always Use HTTPS, Automatic HTTPS Rewrites, Hotlink Protection and Email Obfuscation, changed live via dropdowns.
• Cache & Performance: Cache Level, Browser Cache TTL, Development Mode, Brotli and Rocket Loader, plus Purge Everything and purge-by-URL.
• Firewall: IP access rules and WAF firewall rules, fully manageable by the client.
• Analytics: 24-hour DNS query analytics for the zone.
• Which of these tabs a client sees is controlled per product by the admin; the tab set, its icons and its labels come from one shared registry so the sidebar and the pages themselves are always in step.
• 24 client-area languages, following each client's own WHMCS language setting automatically.

Package & Configuration Options

Zone Creation Defaults (per product)

• Zone Type — Full DNS or Partial (CNAME).
• Default SSL Mode — Off, Flexible, Full, or Strict (Full).
• Default Security Level — Essentially Off, Low, Medium, High, or I'm Under Attack!.
• Default Cache Level — Bypass, Basic, Simplified, or Aggressive.
• Auto-scan DNS on Zone Creation toggle.
• Product Type flags — Shared Hosting, Reseller Hosting, Server/VPS, Other.

Configurable Options (per product, optional)

• Zone Type, SSL Mode, Security Level exposed to the client at checkout, overriding the product defaults above when set.

Client Area Features (per product)

• Individually enable or disable the DNS, Security, Cache, Firewall and Analytics tabs for that product's clients.

Cloudflare Account (shared with Cloudflare Manager)

• Account ID, Server IP for Initial DNS, Auto-update Nameservers.
• Cloudflare Tenant Account toggle with Tenant Admin Email, Global API Key, Tenant Unit ID, New Account Type, and Account Name Pattern.

Client Area Styling (shared per install)

• Theme Mode, light/dark colours, dark-toggle class mapping for non-Lagom themes, and a full theme-variable mapping table.

What the Module Works With

Cloudflare (via the official Cloudflare API v4)

• Zones — create, pause (Suspend), unpause (Unsuspend), delete (Terminate)
• Zone settings — SSL, security level, and the same full settings list as the Cloudflare Manager addon
• DNS records — create, delete (from the admin custom-action AJAX handlers)
• Cache — purge everything and purge by URL
• Firewall — WAF rules and IP access rules, create and delete
• Zone info and DNS analytics for the admin service tab and client-area Overview

WHMCS integration points

• Standard provisioning commands: Create, Suspend, Unsuspend, Terminate
• A custom Purge Cache admin action button
• Product configurable options and product-level Module Settings
• The zone ID and nameservers are written to WHMCS custom fields (CfZoneId, CfNameservers) for admin visibility
• The WHMCS daily cron, for automatic module updates
• Zones created here are mirrored into the Cloudflare Manager addon's own zone table, so they appear on its All Zones admin dashboard alongside addon-connected domains

Notes for the listing form (not part of the copy)

Things worth knowing before this goes live, some of which affect what can honestly be claimed:

• Zone-management AJAX actions have no access control. In ajax_functions.php, the $serviceActions group (pause, unpause, purge, DNS create/update/delete, setting patch, firewall and access-rule create/delete, activation check) is not gated by a logged-in session or by verifying the requesting client owns the target service — only a serviceid is required. This is a real security gap that should be fixed before this listing goes live; it isn't something to describe either way in the copy.
• The API token is written in full to the module log by TestConnection (logModuleCall('cloudflare_server', 'TestConnection', 'API Token: ' . $apiToken, ...)). Worth fixing regardless of the listing.
• Cloudflare Tenant account creation is not wired into this module's zone provisioning. The shared Tenant settings appear on this module's product page and do get saved to the shared settings table, but cloudflare_server_CreateAccount() never calls the tenant account-creation function, and the $account_created flag it checks afterwards is never assigned — so tenant_account is always stored as 0, and Terminate can never clean up a tenant account for a zone this module created. Tenant provisioning does work through the Cloudflare Manager addon's own connect flows. Don't describe this module as supporting tenant-mode zone creation as shipped.
• Automatic module updates are not active. The auto-update hook needs this module's own store product IDs filled in; as shipped all three are 0, so the cron hook logs that it's skipped and exits.
• bot_fight_mode and the minify (CSS/HTML/JS) settings are fetched into the Client Area template variables but have no corresponding form control anywhere in the templates, so they can't actually be changed through the module.

Why Choose WHMPRESS

WHMPress modules are built to sit naturally inside WHMCS rather than bolt on top of it. Cloudflare Server drives its client-area sidebar, its client-area pages and its admin service panel from one shared tab registry, so the two surfaces can never drift out of sync. Every action and icon is built from the module's own CSS icon system rather than static images, and the client-area styling adapts to Lagom, Twenty-One, Six and Nexus out of the box. Every WHMPress module ships with setup documentation and direct support from the developers who built it.

General Compatibility

• WHMCS Versions: Fully compatible with versions 9.0.3 to 8.7

• PHP Versions: Supports PHP 8.4, 8.3, 8.2, and 8.1

• Themes Supported: Works with WHMCS themes such as Six, Twenty-One, and Lagom WHMCS Client Theme

• System Requirement: Requires ionCube Loader v13 or later

Module Price

Monthly Price: 5$.

Annually Price: 39$.

One-Time Price: 75$.

OPEN-SOURCE VERSION: $199 One-time Price.