Skip to content

[Fundamentals] Add information about cf_clearance cookies #19773

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Feb 5, 2025
Merged

[Fundamentals] Add information about cf_clearance cookies #19773

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
ae6f803
jsd cookie fundamentals
patriciasantaana Feb 5, 2025
46ebd1c
Merge branch 'production' into patricia/pcx15482-cookies-fundamentals
patriciasantaana Feb 5, 2025
343629a
add link
patriciasantaana Feb 5, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 4 additions & 8 deletions ...content/docs/fundamentals/reference/policies-compliances/cloudflare-cookies.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,11 +23,7 @@ When enabling session affinity with [Cloudflare Load Balancer](/load-balancing/u
The `__cflb` cookie allows Cloudflare to return an end user to the same customer origin for a specific period of time configured by the customer. This allows the end user to have a seamless experience (for example, this cookie is used for keeping an end user’s items in a shopping cart while they continue to navigate around the website). This cookie is a session cookie that lasts from several seconds up to 24 hours.

:::note


Currently Cloudflare only supports Session Affinity in "orange-cloud" (proxied) mode.


:::

### \_\_cf\_bm cookie for Cloudflare bot products
Expand All @@ -39,11 +35,7 @@ This cookie expires after 30 minutes of continuous inactivity by the end user. T
A separate `__cf_bm` cookie is generated for each site that an end user visits, as Cloudflare does not track users from site to site or from session to session. The `__cf_bm` cookie is generated independently by Cloudflare, and does not correspond to any user ID or other identifiers in a customer’s web application.

:::note


Bot Management is available to Enterprise customers as an add-on service. Contact your Cloudflare account team to enable Bot Management for your site. Non-Enterprise customers can enable [Bot Fight Mode or Super Bot Fight Mode](/bots/).


:::

<Render file="disable-cf-bm-cookie" product="bots" />
Expand All @@ -52,6 +44,10 @@ Bot Management is available to Enterprise customers as an add-on service. Contac

<Render file="sequence-rules" product="bots" params={{ one: "Sequence rules", two: "/bots/concepts/sequence-rules/" }} />

### cf_clearance cookie for Cloudflare bot products

The `cf_clearance` cookie is required for [JavaScript detections](/bots/reference/javascript-detections/). JavaScript detections are stored in the `cf_clearance` cookie.

### cf\_ob\_info and cf\_use\_ob cookie for Cloudflare Always Online

The `cf_ob_info` cookie provides information on:
Expand Down