Cloudflare-AutoRAG
Cloudflare •
Since 2025
Quick Actions
Official Docs
What is Cloudflare-AutoRAG?
Cloudflare-AutoRAG is the user agent for Cloudflare's AutoRAG (Automated Retrieval-Augmented Generation) feature, which crawls and indexes content on Cloudflare-hosted sites to enable RAG-powered AI features. The bot processes website content to build a knowledge base that can be queried through Cloudflare's AI products. It respects robots.txt directives and only operates on sites where the feature is enabled by the website owner.
User Agent String
Cloudflare-AutoRAG
How to Control Cloudflare-AutoRAG
Block Completely
To prevent Cloudflare-AutoRAG from accessing your entire website, add this to your robots.txt file:
# Block Cloudflare-AutoRAG
User-agent: Cloudflare-AutoRAG
Disallow: /
Block Specific Directories
To restrict access to certain parts of your site while allowing others:
User-agent: Cloudflare-AutoRAG
Disallow: /admin/
Disallow: /private/
Disallow: /wp-admin/
Allow: /public/
Set Crawl Delay
To slow down the crawl rate (note: not all bots respect this directive):
User-agent: Cloudflare-AutoRAG
Crawl-delay: 10
How to Verify Cloudflare-AutoRAG
Verification Method:
Verify requests originate from Cloudflare IP ranges
Verify requests originate from Cloudflare IP ranges
Learn more in the official documentation.
⚠️ AI Training Notice
This bot may collect and use your website content for AI model training. Consider whether you want your content used for this purpose before allowing access.
This bot may collect and use your website content for AI model training. Consider whether you want your content used for this purpose before allowing access.
Detection Patterns
Multiple ways to detect Cloudflare-AutoRAG in your application:
Basic Pattern
/Cloudflare\-AutoRAG/iStrict Pattern
/^Cloudflare\-AutoRAG$/Flexible Pattern
/Cloudflare\-AutoRAG[\s\/]?[\d\.]*?/iVendor Match
/.*Cloudflare.*Cloudflare\-AutoRAG/iImplementation Examples
// PHP Detection for Cloudflare-AutoRAG
function detect_cloudflare_autorag() {
$user_agent = $_SERVER['HTTP_USER_AGENT'] ?? '';
$pattern = '/Cloudflare\\-AutoRAG/i';
if (preg_match($pattern, $user_agent)) {
// Log the detection
error_log('Cloudflare-AutoRAG detected from IP: ' . $_SERVER['REMOTE_ADDR']);
// Set cache headers
header('Cache-Control: public, max-age=3600');
header('X-Robots-Tag: noarchive');
// Optional: Serve cached version
if (file_exists('cache/' . md5($_SERVER['REQUEST_URI']) . '.html')) {
readfile('cache/' . md5($_SERVER['REQUEST_URI']) . '.html');
exit;
}
return true;
}
return false;
}
# Python/Flask Detection for Cloudflare-AutoRAG
import re
from flask import request, make_responsedef detect_cloudflare_autorag():
user_agent = request.headers.get('User-Agent', '')
pattern = r'Cloudflare-AutoRAG'
if re.search(pattern, user_agent, re.IGNORECASE):
# Create response with caching
response = make_response()
response.headers['Cache-Control'] = 'public, max-age=3600'
response.headers['X-Robots-Tag'] = 'noarchive'
return True
return False# Django Middleware
class CloudflareAutoRAGMiddleware:
def __init__(self, get_response):
self.get_response = get_response
def __call__(self, request):
if self.detect_bot(request):
# Handle bot traffic
pass
return self.get_response(request)
// JavaScript/Node.js Detection for Cloudflare-AutoRAG
const express = require('express');
const app = express();// Middleware to detect Cloudflare-AutoRAG
function detectCloudflareAutoRAG(req, res, next) {
const userAgent = req.headers['user-agent'] || '';
const pattern = /Cloudflare-AutoRAG/i;
if (pattern.test(userAgent)) {
// Log bot detection
console.log('Cloudflare-AutoRAG detected from IP:', req.ip);
// Set cache headers
res.set({
'Cache-Control': 'public, max-age=3600',
'X-Robots-Tag': 'noarchive'
});
// Mark request as bot
req.isBot = true;
req.botName = 'Cloudflare-AutoRAG';
}
next();
}app.use(detectCloudflareAutoRAG);
# Apache .htaccess rules for Cloudflare-AutoRAG# Block completely
RewriteEngine On
RewriteCond %{HTTP_USER_AGENT} Cloudflare\-AutoRAG [NC]
RewriteRule .* - [F,L]# Or redirect to a static version
RewriteCond %{HTTP_USER_AGENT} Cloudflare\-AutoRAG [NC]
RewriteCond %{REQUEST_URI} !^/static/
RewriteRule ^(.*)$ /static/$1 [L]# Or set environment variable for PHP
SetEnvIfNoCase User-Agent "Cloudflare\-AutoRAG" is_bot=1# Add cache headers for this bot
<If "%{HTTP_USER_AGENT} =~ /Cloudflare\-AutoRAG/i">
Header set Cache-Control "public, max-age=3600"
Header set X-Robots-Tag "noarchive"
</If>
# Nginx configuration for Cloudflare-AutoRAG# Map user agent to variable
map $http_user_agent $is_cloudflare_autorag {
default 0;
~*Cloudflare\-AutoRAG 1;
}server {
# Block the bot completely
if ($is_cloudflare_autorag) {
return 403;
}
# Or serve cached content
location / {
if ($is_cloudflare_autorag) {
root /var/www/cached;
try_files $uri $uri.html $uri/index.html @backend;
}
try_files $uri @backend;
}
# Add headers for bot requests
location @backend {
if ($is_cloudflare_autorag) {
add_header Cache-Control "public, max-age=3600";
add_header X-Robots-Tag "noarchive";
}
proxy_pass http://backend;
}
}
Should You Block This Bot?
Recommendations based on your website type:
| Site Type | Recommendation | Reasoning |
|---|---|---|
| E-commerce | Limit Access | Protect pricing and inventory data from AI training |
| Blog/News | Consider Blocking | Your content may be used for AI training without compensation |
| SaaS Application | Block | No benefit for application interfaces; preserve resources |
| Documentation | Selective | Allow for public docs, block for internal docs |
| Corporate Site | Limit | Allow for public pages, block sensitive areas like intranets |
Advanced robots.txt Configurations
E-commerce Site Configuration
User-agent: Cloudflare-AutoRAG
Crawl-delay: 5
Disallow: /cart/
Disallow: /checkout/
Disallow: /my-account/
Disallow: /api/
Disallow: /*?sort=
Disallow: /*?filter=
Disallow: /*&page=
Allow: /products/
Allow: /categories/
Sitemap: https://example.com/sitemap.xml
Publishing/Blog Configuration
User-agent: Cloudflare-AutoRAG
# Blocking AI training bot
Disallow: /
SaaS/Application Configuration
User-agent: Cloudflare-AutoRAG
Disallow: /app/
Disallow: /api/
Disallow: /dashboard/
Disallow: /settings/
Allow: /
Allow: /pricing/
Allow: /features/
Allow: /docs/
Quick Reference
User Agent Match
Cloudflare-AutoRAGRobots.txt Name
Cloudflare-AutoRAGCategory
aiRespects robots.txt
Yes
Copied to clipboard!