DevDome Redirect Manager: Link Rotator, Geo Redirect & 302 Redirect

DevDome Redirect Manager handles URL redirect rules for your entire site, selected content, custom paths or 404 pages. Use a 302 redirect for temporary forwarding or a 301 redirect for permanent redirection, with separate schedules and statistics for each rule. Configure everything from one screen without coding; all features are free, with unlimited rules and no paid tier.

Rules can also match by pattern: a regular expression or a wildcard moves a whole section of a site with one rule, and the matched part can be carried into the destination. Changed and trashed addresses are redirected automatically.

Use the link rotator to send visitors through a list of destination URLs in order, randomly or with weighted distribution. The URL rotator can split traffic between destinations for basic split testing. For domain forwarding, send visitors to the same path on another domain while preserving the query string.

Set up a geo redirect with optional geotargeting to redirect by country using IP lookup. Include or exclude listed countries for each country redirect rule. Choose Desktop, Mobile or Tablet for a device redirect, or select Mobile for a mobile redirect. Country filtering is off by default.

Redirect Setup: choose what to redirect

Use this redirector for a page redirect, post redirect or category redirect, or select your entire website for a site redirect. The highest-priority running rule that matches handles the request.

Under What To Redirect, choose:

• Entire website – runs on every public page for a website redirect.
• Selected existing URLs – search Categories, Pages and Posts with a live picker. Selected items appear as chips with per-item hit counts; drag them to set priority for the “found” mode.
• Custom URLs – enter exact paths, one per line, such as /blog/ or /blog/best-headphones/, whether the page exists or not. A trailing slash matches that page and everything under it.
• All 404’s – runs on every not-found page to catch dead links. For a 404 to homepage rule, set your homepage as the destination.
• Referring websites – match listed websites against the browser’s referrer. A domain such as reddit.com covers that site and its subdomains; a word such as reddit matches referring addresses containing it. Without UTM source matching, visits with no referrer or an internal referrer do not match. “Only on selected pages” restricts the rule to chosen categories, pages or posts.

For a homepage redirect, target the homepage through Selected existing URLs. For short links, choose a custom path and its destination: a short URL or vanity URL uses a path you supply, without generated slugs.

Referring websites and UTM Source

“Only visitors arriving from outside” redirects external arrivals, including visits with no referrer, and leaves visitors moving between your own pages alone.

UTM Source – “Also match the link’s UTM source” lets a Referring websites rule match tagged links from apps and sources without a referrer: for reddit.com, both ?utm_source=reddit.com and ?utm_source=reddit match. Anyone can set this label; it does not verify origin.

Redirect Method and URL forwarding

Choose JavaScript Redirect, 301 Permanent, 302 Temporary, 307 Temporary, 308 Permanent, 410 Gone or Meta Refresh per rule: a 301 redirect for permanent redirection, a 302 redirect for temporary URL forwarding. New-tab opening and client-side delays need JavaScript; server and meta methods open in the same tab.

Under Where To Send Traffic, choose:

• To provided links – enter one or more destination URLs.
• To links or buttons on the page – enter a fragment such as amazon.com to find a matching link/button already on the page. You can target the N-th match.
• To same path on another domain – preserve the visitor’s path and query for a domain redirect. For example, yoursite.com/post/123 becomes otherdomain.com/post/123.

Link rotation and traffic distribution

The URL rotator supports First to last, Random and Weighted distribution for provided links. The Click Distribution slider favours the first link, splits evenly or favours the last, with a live preview; Repeat List restarts from the first URL.

For basic AB testing or split testing, the rotator splits traffic between links; it does not measure conversions or pick a winner.

How often to redirect

Choose Every visit, Once per visitor or After a delay. The latter two recognise returning visitors by IP address or IP + browser/device and can redirect only every N-th unique visitor; After a delay sets the gap in minutes, hours or days.

Daily Redirect Limit – “Limit redirects per day” sets a per-rule cap chosen each day between two whole numbers; the same number twice is a fixed cap. A redirect counts when the rule makes it, not on arrival; with Visitor Check it counts when the pass is accepted, so loading a page costs nothing.

Known Bots, Outdated Browsers and Visitor Check

Known Bots – “Don’t redirect known bots” is on by default. Matching requests are not redirected, sent to the bypass link or counted as visitors. Local checks use built-in browser identifiers and any shared DevDome bot data already stored locally; this build downloads no bot feeds. Unrecognised bots can still be redirected.

Outdated Browsers – “Don’t redirect outdated browsers” skips reported Chrome/Chromium versions below 125, except 109, and Firefox below 125, except 115. Edge is checked through its Chrome version. Browser identifiers containing Mobile, Android, iPhone or iPad are not checked. Older versions can belong to real visitors.

Visitor Check – “Require the same IP address to continue” checks that a single-use pass returns from the same IP address and browser. It applies only to JavaScript redirects to provided links or the same path on another domain, not links found on the page; off by default. The pass stays in your database as a keyed hash of IP address and browser, never the raw values, is deleted when used and expires within minutes plus any configured delay.

Open Link Settings: automatic redirect or click

Choose an automatic redirect or wait for a visitor’s click. For an auto redirect with a delay, use the JavaScript method.

• Open Link In – Same Tab or New Tab. New Tab requires JavaScript.
• Same Tab Link Delay – instant or a random delay in seconds within a range.
• Redirect On Click – wait for a click/tap anywhere before redirecting.
• After Click Delay – wait a random time up to 4 seconds after the click.
• New Tab Link Delay – instant or a random delay before the new tab is armed; it opens on the visitor’s next real click, because browsers block tabs that open by themselves.

Geo Filter Settings: country redirect and geolocation

Use geotargeting for a country redirect based on IP geolocation. The GeoIP lookup supplies a country code; a geo IP redirect can include or exclude listed countries.

• Test geo service – check that the service is reachable from your server.
• Geo Filtering – enable or disable the country filter; off by default.
• Filter mode – redirect only listed countries or everyone except them. An unresolved country is not redirected by an “except listed” rule.
• Site Behind Proxy / CDN – behind Cloudflare or another proxy, enable “Trust forwarded IP headers” to use the real visitor IP. The forwarded header counts only when the connection comes from a Cloudflare or private proxy address. “Detect automatically” ticks the box for you.

See External services for what a geo redirect sends and where.

Optional Settings: devices, cache and schedules

• Devices to Redirect – select Desktop, Mobile or Tablet. For a mobile redirect, check Mobile; other devices follow Not Redirected Visitors.
• Purge Page Cache On Save – clear cached copies of targeted pages when saving/running a rule so it takes effect immediately. Supports WP Rocket, LiteSpeed Cache, W3 Total Cache, WP Super Cache, WP Fastest Cache, SiteGround Optimizer, WP-Optimize, Cache Enabler, Hummingbird and Breeze.
• Not Redirected Visitors – Leave On Page or Send To Bypass Link, using a URL you choose.
• Schedule Mode – Always Active or Custom Schedule, with a run time, selected weekdays and up to three specific time windows.

Optional Settings: visitor exclusions

Exclude your own address, selected browsers or logged-in roles such as Administrator. Per rule, off by default; matching visitors see the page as usual and count as skipped bots.

• Excluded IP Addresses – one IPv4 or IPv6 address or CIDR range per line.
• Excluded Browser Strings – skip User-Agent strings containing listed text, ignoring case. Entries under 5 characters are not saved.
• Excluded User Roles – skip logged-in users with a ticked role.

Optional Settings: hide from search and DevDome Analytics

• Noindex Header – every address the running rule targets answers X-Robots-Tag: noindex, nofollow, to crawlers and visitors alike, before anyone is redirected.
• Robots.txt Disallow – lists the rule’s Custom URLs or Selected existing URLs in the virtual robots.txt. Stops crawling, not indexing; no file is written.
• Report To DevDome Analytics – reports each redirect to your DevDome Analytics dashboard; see External services.

Per rule, off by default.

Rules, run state and link tracking

Add, duplicate, delete, start and stop rules independently; each has a nickname and priority, and you drag rules to reorder them.

• Save & Run starts a rule; Stop stops it. Live status shows Running/Stopped, run time and time left.
• Save Settings saves without changing run state. Return to Default resets the current rule.
• Reset Stats clears the current rule’s statistics and rotation position, not today’s daily-limit count.
• Export downloads every rule as JSON, without statistics or run state. Import replaces every rule on the site; imported rules arrive stopped. Export CSV downloads one row per rule (name, state, what, source, destination, method); Import CSV adds one custom-URL rule per row (source, destination, method, name), skips sources already on the site and leaves existing rules alone.

Each rule records visitors, page views, unique users, unique IPs, redirects, bypassed visitors, device and country counts and source/destination breakdowns, with a time-range filter; this link tracking covers rule activity, not arrival at a destination.

Bots Skipped counts bot and outdated-browser matches, the three exclusions and refused Visitor Check passes, totalled across rules on the DevDome dashboard. It is not a count of confirmed bots.

Developer hooks

• devdredi_redirect_target filters destinations for provided links and same-path redirects.
• devdredi_pass_bind_address filters the address a Visitor Check pass is bound to, for example a network range.
• devdredi_redirected fires on redirect events. Neither confirms arrival at the destination.

AI and Agent Support

On WordPress 6.9+, compatible AI agents and MCP clients can use WordPress Abilities when your site exposes them, for example through the WordPress MCP Adapter. Abilities cover rule configuration, statistics, content search, 404 suggestions with DevDome Link Monitor, geo status, export and rule management. Administrator access is required.

New fields are skip_ips, skip_user_agents, skip_roles, visitor_check, skip_old_browsers, daily_limit_enabled, daily_limit_min, daily_limit_max, referrer_utm_scan, search_noindex, search_disallow and analytics_report (needs confirmation). A list entry that is not valid is refused and nothing is changed; a list with entries switches its exclusion on, an empty list switches it off. Statistics include bots_skipped. Agents must obtain user agreement and send confirm: true when turning an enabled Visitor Check or Outdated Browsers setting off. Turning Known Bots off does not currently require that flag.

New rules start stopped unless requested otherwise. Updates are all or nothing. Enabling geo targeting, deleting rules and resetting statistics also require confirmation.

External services

Error reports (devdome.com), only when you press “Report this error” on an error message. The plugin sends the error text, the plugin, bundled library, WordPress and PHP versions, whether the site is a multisite, the site locale, the screen you were on, your site address, the generated site ID, your DevDome account ID if the site is connected, and your admin e-mail (so support can reply) to https://devdome.com/api/plugin/error-report. No redirect rules, visitor data or statistics are included. Nothing is sent unless you press the button. DevDome: Terms of Service, Privacy Policy.

Plugin catalog (devdome.com). The DevDome Dashboard in wp-admin fetches the list of DevDome plugins (names, descriptions, logos, links, WordPress.org slugs) from https://devdome.com/wp-plugins/catalog.json at most once every 12 hours. Only the bundled core version is sent; no site or visitor data.

The plugin can also talk to the DevDome services below, all optional. Service provider for every service here: DevDome. Terms of service: https://devdome.com/terms-of-service . Privacy policy: https://devdome.com/privacy-policy .

Geo lookup (api.devdome.com/geo-resolve)

Used only by the optional Geo Filter (off by default) to turn a visitor’s IP address into a country code.

• When a rule with Geo Filtering enabled handles a front-end request, the visitor’s IP address is sent to https://api.devdome.com/geo-resolve/classify (POST, body {"ips":[<ip>]}). Results are cached.
• Test geo service requests https://api.devdome.com/geo-resolve/health; no visitor data is sent. Detect automatically runs locally and sends nothing.

Bot detection feeds (api.devdome.com/bot-protection)

The bundled DevDome bot-detection library can download three block lists for local matching: https://api.devdome.com/bot-protection/list (bot user-agent patterns), .../asns (data-center networks) and .../drop (Spamhaus DROP ranges). No visitor data is sent. On this WordPress.org build the downloads are disabled entirely: no request is made or scheduled, connected or not.

Optional DevDome account connection (devdome.com and api.devdome.com)

Optional: nothing is sent until you press Connect on the DevDome screen. Connecting opens devdome.com to sign in; the plugin then stores your public DevDome Account ID and a site token and verifies the link against https://api.devdome.com/plugin/account (site domain and site token). When you connect from the DevDome Tools dashboard, whose Connect card says so first, those checks also send the slug and version of each active DevDome plugin plus the library, WordPress and PHP versions, so your account can show which sites run which plugins; sites connected earlier or from a button without that text send no list. Disconnecting sends the site domain and token once to https://api.devdome.com/plugin/disconnect and stops the list. The connection itself sends no visitor data, content or redirect rules; visitor data leaves the site only through the click reports below, for a rule where you tick Report To DevDome Analytics.

DevDome Analytics click reports (analytics.devdome.com)

Off by default, per rule: nothing is sent until you tick Report To DevDome Analytics on a rule, and nothing while the account is not connected. Clearing the box or disconnecting stops it at once; a report queued in the same request is dropped if consent is gone by then.

• Redirect events. Each redirect the rule makes is POSTed by your server as one redirect event to https://analytics.devdome.com/api/event (JSON): site id (domain), DevDome Account ID, source page URL and path, destination URL, referrer (or the previous DevDome site in a chain), visitor IP address and browser string with the browser, operating system and device type derived from it, country when behind Cloudflare, an inbound ?d= token from another of your sites, a product code when the path carries one, the DevDome Analytics visitor and session …