Configuring Cloudflare to work with Trust Payments

  Last updated: 

If your servers are using Cloudflare, you may notice that:

  • Transactions are processed successfully but orders aren't updated on your website's backend.
  • Email notifications are not received from Trust Payments to alert of failed transactions.
  • Email notifications are coming through, but success / failure messages aren't shown to users.

These symptoms typically indicate that Cloudflare's security features are blocking essential Trust Payments notifications from reaching your servers. To ensure complete compatibility with your Cloudflare setup, please review the following solutions.

 

Solutions by Cloudflare plan

Free plan users

If you're using Cloudflare's free plan with Bot Fight Mode enabled:

  1. Temporarily disable Bot Fight Mode - Navigate to your Cloudflare dashboard, select "Security", then "Bots", and disable Bot Fight Mode to restore missing functionality.
  2. Add Trust Payments to your IP Access Rules - Select "Security", then "WAF", then "Tools". Add Trust Payments IP ranges with an "Allow" action.
  3. Test your integration to ensure transaction notifications are processing correctly.
  Important: IP allowlisting will bypass all configured custom rules and rate limiting rules for Trust Payments traffic.

Pro, Business, and Enterprise plan users

For paid Cloudflare plans with Super Bot Fight Mode:

  1. Create a custom WAF rule - Navigate to "Security", then "WAF", then "Custom rules".
  2. Configure the rule - Set conditions based on Trust Payments IP ranges or hostname, then set the action to "Skip" Super Bot Fight Mode.
  3. Save and deploy your custom rule.
  4. Test your integration to ensure transaction notifications are processing correctly.

 

Trust Payments IP ranges

Please ensure you have added the Trust Payments IP ranges to the allowlist in your Cloudflare configuration.

  For the most current list of IP ranges that require allowlisting, refer to our IP address page.

View Trust Payments IP ranges

 

Testing your configuration

After implementing the changes:

  • Process a test transaction through your payment system.
  • Verify that your website is receiving transaction notifications.
  • Confirm that orders are updated on your backend as expected.
  • Check that you receive the expected email notifications, if enabled.

 

Troubleshooting

If you continue experiencing issues:

  • Verify your Cloudflare plan type and ensure you're following the correct instructions.
  • Check that all Trust Payments IP ranges are added to your Cloudflare allowlist.
  • Review your Cloudflare logs for any blocked requests from Trust Payments.
  • Temporarily disable Cloudflare protection to confirm the issue is Cloudflare-related.
  If problems persist after following these steps, contact our Support Team with your site reference and details of the configuration changes you've made.
Was this article helpful?
1 out of 1 found this helpful