Allow Rent Fetch Sync monitoring in Cloudflare
For sites using our sync service, we actively monitor those sites to be able to notify you about problems before you know they exist. In order for that to work, if Cloudflare is blocking our requests, we’ll need to make an exception in Cloudflare to allow our requests to go through, and the fix depends on which Cloudflare bot protection product your site is using.
Rent Fetch monitoring checks your site through two WordPress endpoints:
/wp-json/rentfetch/v1/monitoring/status/wp-cron.php?doing_wp_cron=…
The main endpoint is the monitoring status route. The wp-cron.php request is a supporting request that may also need to be allowed.
Recommended Setup for Paid Cloudflare Plans
If your site is on a paid Cloudflare plan and uses Super Bot Fight Mode, the cleanest fix is to create a Custom Rule that skips bot protection for these two Rent Fetch monitoring requests.
Cloudflare Rule Type
Use:
- Custom rule
Do not use:
- Rate limiting rule
- Managed rule
Suggested Rule Expression
(http.request.method eq "GET" and http.request.uri.path eq "/wp-json/rentfetch/v1/monitoring/status") or (http.request.method eq "GET" and http.request.uri.path eq "/wp-cron.php" and http.request.uri.query contains "doing_wp_cron")
Rule Action
Set the action to:
- Skip
Then choose the relevant products/phases to skip, especially:
- Super Bot Fight Mode
If Cloudflare is still interfering after that, you may also need to skip:
- Browser Integrity Check
- Relevant WAF managed rules, if those are being triggered on your site
Here’s a screenshot of a working implementation:
If Your Site Uses Free Bot Fight Mode
Cloudflare’s free Bot Fight Mode does not support path-based skip exceptions through Custom Rules.
If your site is on the free plan, your options are:
- Turn off Bot Fight Mode for the site
- Add an IP allowlist / IP Access Rule for the Rent Fetch API server IP (please ask us for this at that time)
- Upgrade to a paid Cloudflare plan and use the rule above with Super Bot Fight Mode
Why This Rule Is Narrow
The rule above only allows the specific requests Rent Fetch uses for monitoring:
- a signed GET request to the monitoring status endpoint
- a cron wake-up request to WordPress
That keeps the exception limited to the traffic Rent Fetch actually needs, instead of broadly disabling protection across your site.
Troubleshooting
If monitoring is still being blocked after adding the rule, please reach out and we’ll work together on your particular setup to allow our monitoring a pathway to operate. This it is a valuable tool that notifies us in advance when there’s an issue with an API or with the sync process.
