# Allow traffic — CacheBoost Docs
> Verify site ownership and allowlist CacheBoost IPs.
Source: https://www.cache-boost.com/support/guides/allow-traffic.md
Language: en
---
Verify site ownership and authorize CacheBoost requests using a security token header.
CacheBoost needs to reach your site to warm it. Instead of managing IP addresses, CacheBoost identifies itself with a per-site security token sent on every request. Configure your WAF, CDN, or firewall to allow requests that carry this header.
## Site verification
When you register a site, CacheBoost gives you a `validation_token`. Choose one method, then click **Verify** in the dashboard.
### Method 1: HTML file
Create a file named `{validation_token}.html` at the root of your site:
```
https://www.example.com/a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4.html
```
The file must return HTTP 200. Its content is not checked. You can delete it after verification.
### Method 2: Meta tag
Add a `` tag to the `` of your homepage:
```html
```
CacheBoost fetches your homepage and checks for this tag. The token must match exactly.
## Security token header
CacheBoost sends the `X-CacheBoost-Token` header on all warm-up requests and sitemap downloads. Whitelist this header in your firewall, CDN, or WAF to authorize CacheBoost traffic.
### Find your token
Go to **My Sites** in the dashboard and click the key icon next to your site. Your header value is displayed ready to copy:
```
X-CacheBoost-Token: YOUR_SECURITY_TOKEN
```
### Configure your firewall / WAF / CDN
Create a rule that bypasses blocking or rate-limiting for requests where `X-CacheBoost-Token` matches your site's token. The exact steps depend on your provider — consult its documentation for header-based allowlist rules.
You can regenerate your token at any time from the key icon menu. Update your firewall rule whenever you regenerate it.
## Test the configuration
After configuring the header rule, trigger a manual run from the dashboard or via:
```
POST /v1/sites/{siteId}/boosts/{boostId}/run
```
Check the run results — a successful fetch for each URL confirms CacheBoost traffic is getting through.
---
**CacheBoost** — Automatic cache warming for faster websites.
- Website: https://www.cache-boost.com
- Full content (all pages): https://www.cache-boost.com/llms-full.txt
- LLM index: https://www.cache-boost.com/llms.txt
- Documentation: https://www.cache-boost.com/support/getting-started/introduction
- Start free: https://www.cache-boost.com/try