Cache Exceptions

Non-Cache URLs

If you want to stop specific pages or directories from being cached, you can do so without disabling the cache for the whole site.

Go to the Sucuri Firewall dashboard, then Performance → Non-Cache URLs. Add the path you want to exclude and select Add URL.

This feature will work with every caching level.

How entries work:

• An entry matches any URL that contains it.
  For example, /members/
  Matches: /members/, /members/profile and /en/members/list.

• A query string counts as part of the URL, so ?preview= excludes every URL carrying that parameter.

• To match only the start of a path, begin the entry with ^.
  For example, ^/account/
  Matches: /account/settings but not /blog/account/.

• Clear the cache after adding a URL. A page already cached stays cached until it expires or you clear the cache.

• Non-Cache URLs apply to pages, not to static files. Images, CSS, JavaScript and other static files are still cached on the firewall, even when their URL matches an entry. See “Static files” below.

Attention:

Don’t add high-traffic pages or directories, such as /feed/ or your home page /, to the Non-Cache URL settings. Every request to the URLs in these settings will reach your hosting server, which makes your site slower and more vulnerable to DDoS attacks.

You don’t need to add these:

• Pages whose URL has a path segment starting with one of these words, for example /wp-admin, /wp-login, /admin/, /login, /logout, /register, /profile, /members, /cart, /checkout, /orders, /customer, /search (so /en/cart and /login-help are excluded too).
  If you use the following, please add them to the Non-Cache URL settings manually: /account, /my-account, /order (singular), and /admin (without the trailing slash).

• Visits from logged-in users of WordPress, WooCommerce, phpBB, vBulletin, XenForo and ASP.NET, recognized by their login cookies.

• Form submissions (POST) and other non-GET requests.

Images, .css, .js, .pdf, .txt, .mp3 and other static files are cached on the firewall’s edge network for up to 3 days, despite the caching level chosen or the use of the Non-Cache URL settings.

To make changes appear for static files, you can do the following:

• Versioning (recommended): add a version query string to the file’s URL, for example script.js?ver=123.1, and increase it on each update (?ver=123.2). Each new version is fetched fresh from your server, so visitors get the update right away. Most CMS platforms, WordPress included, already do this for you.

• Clear Cache: clears all cached pages and files for your site.

Developer Mode makes the firewall skip its cache, for pages and static files, while you work on your site. Please check the Developer Mode article to learn more, and remember to turn it off when you finish.