导航|地址|刷新
Response Header Transform Rules

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/rules/llms.txt
Use this file to discover all available pages before exploring further.

Docs Directory API SDKs Changelog

Search

Log in

Rules

/

Overview

Examples

Configuration Rules

Overview

Create a rule in the dashboard

Create a rule via API

Available settings

Examples

Overview

Define a single configuration rule using Terraform

Snippets

Overview

How it works

Create in the dashboard

Configure via API

Configure using Terraform

Examples

Troubleshooting

When to use Snippets vs Workers

Transform Rules

Overview

Rewrite URLs

Overview

Create a rule in the dashboard

Create a rule via API

Create a rule using Terraform ↗

Reference

URL rewrite parameters

Available fields and functions

Modify request headers

Overview

Create a rule in the dashboard

Create a rule via API

Create a rule using Terraform ↗

Reference

Format of header names and values

Available fields and functions

API parameter reference

Modify response headers

Overview

Create a rule in the dashboard

Create a rule via API

Create a rule using Terraform ↗

Reference

Format of header names and values

Available fields and functions

API parameter reference

Managed Transforms

Overview

Configure Managed Transforms

Available Managed Transforms

Troubleshooting

Examples

Overview

Add a request header for subrequests from other zones

Add a request header with the current bot score

Add a response header with a static value

Add a wildcard CORS response header

Add request header with a static value

Normalize encoded slashes in URL path

Remove a request header

Remove a response header

Rewrite blog archive URLs

Rewrite image paths with several URL segments

Rewrite page path for visitors in specific countries

Rewrite path for object storage bucket

Rewrite path of archived blog posts

Rewrite path of moved section of a website

Rewrite URL query string

Set a response header with the current bot score

Set response header with a static value

Redirects

Overview

Single Redirects

Overview

Create rule in the dashboard

Create rule via API

Create rule using Terraform

Available settings

Bulk Redirects

Overview

Concepts

How it works

Create in the dashboard

Create via API

Configure using Terraform

Reference

URL redirect parameters

Supported URL components

Available fields and functions

CSV file format

API JSON objects

FAQ

Examples

Overview

Perform mobile redirects

Redirect admin area requests to HTTPS

Redirect from root to WWW

Redirect from WWW to root

Redirect local visitors to specific subdomains

Redirect requests for a domain to a new domain

Redirect requests from one country to a domain

Redirect requests from one domain to another

Redirect requests to a different hostname

Redirect visitors to a new page URL

Remove locale from URL path

Origin Rules

Overview

Create a rule in the dashboard

Create a rule via API

Examples

Overview

Change the destination port

Change the HTTP Host header and DNS record

Define a single origin rule using Terraform

Tutorials

Overview

Change URI path and Host header

Point to Pages with a custom domain

Point to R2 bucket with a custom domain

Available settings

API parameter reference

FAQ

Cache Rules ↗

Cloud ConnectorBeta

Overview

Configure a rule in the dashboard

Configure a rule via API

Configure rules using Terraform

Supported cloud providers

Examples

Overview

Route /images to an S3 Bucket

Route /images to an S3 Bucket using Terraform

Send EU visitors to a Google Cloud Storage bucket

Serve /static-assets from Azure Blob Storage

Custom Errors

Overview

Edit Error Pages

Create custom error rules

Example rules

Common API calls

Reference

Parameters

Error tokens

Error page types

Troubleshooting

Compression Rules

Overview

Create a rule in the dashboard

Create a rule via API

Available settings

Examples

Overview

Disable Brotli compression

Disable compression for AVIF images

Enable Zstandard compression for default content types

Use Gzip compression for CSV files

Use only Brotli compression for a specific path

Page Rules

Overview

Manage

How to

URL forwarding

Reference

Settings

Additional reference

Wildcard matching

Recommended rules

Troubleshooting

General

Billing and subscription

URL normalization

Overview

How it works

Configure in the dashboard

Settings

Examples

Trace a requestBeta

Overview

Use Cloudflare Trace

Limitations

Changelog

Reference

Rules language ↗

Troubleshooting

Page Rules migration guide

Changelog

Agent resources

Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

Rules llms.txt ↗

Rules llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗

Home

/Rules

/Transform Rules

/Modify response headers

Response Header Transform Rules

Last updated May 5, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewImportant remarksTroubleshooting

Use Response Header Transform Rules to manipulate the headers of HTTP responses sent to website visitors.
flowchart LR accTitle: Header modifications diagram accDescr: Header transform rules can change the headers sent to your origin server (request header modifications) or sent your your website visitors (response header modifications). A[Visitor] B((Cloudflare)) C[(Origin server)] A -.-> B -. "Includes request<br> header modifications" .-> C C -.-> B == "Includes response<br> header modifications" ==> A style A stroke-width: 2px style B stroke: orange,fill: orange,color: black linkStyle 0,1,2 stroke-width: 1px linkStyle 3 stroke-width: 3px

To modify HTTP headers in the request sent to your origin server, refer to Request Header Transform Rules.

Through Response Header Transform Rules you can:

Set the value of an HTTP response header to a literal string value, overwriting its previous value or adding a new header to the response if it does not exist.

Set the value of an HTTP response header according to an expression, overwriting its previous value or adding a new header to the response if it does not exist.

Add a new HTTP response header with a literal string value without removing any existing headers with the same name.

Add a new HTTP response header according to an expression without removing any existing headers with the same name.

Remove an HTTP header from the response.

You can create a response header transform rule in the dashboard, via API, or using Terraform.

For more complex response header modifications, consider using Snippets.

Important remarks

The response header values are calculated using the field values from the corresponding HTTP request. For example, the field ip.src.country (used in expressions) will return the country of the website visitor, not the country of the origin server where the response was sent from.

You cannot add, modify, or remove HTTP response headers whose name starts with cf- or x-cf-.

You cannot modify the value of certain headers such as server, eh-cache-tag, or eh-cdn-cache-control.

Currently you cannot reference IP lists in expressions of Response Header Transform Rules.

The HTTP response header removal operation will remove all response headers with the provided name.

If you change the value of an existing HTTP response header using an expression that evaluates to an empty string ("") or an undefined value, the HTTP response header is removed.

Currently, there is a limited number of HTTP response headers that you cannot change. Cloudflare may remove restrictions for some of these HTTP response headers when presented with valid use cases. Create a post in the community ↗ for consideration.

Response header transform rules will also apply to default Cloudflare error pages and Custom Errors.

Modifying cache-control, CDN-Cache-Control, or Cloudflare-CDN-Cache-Control headers using response header transform rules will not change the way Cloudflare caches an object, because Cloudflare evaluates caching behavior before applying response header modifications. To control Cloudflare cache behavior, create a cache rule.

To add a set-cookie header to the response, use one of the Add static/Add dynamic operations instead of Set static/Set dynamic. Add operations append a new header without removing existing headers of the same name, while Set operations replace all existing headers of that name. Using a Set operation for set-cookie will remove any set-cookie headers already in the response, including those added by other Cloudflare products such as Bot Management.

Response header transform rules run in order, and later rules can overwrite changes done by previous rules.

The values of request and response fields are immutable within each phase, such as the http_response_headers_transform phase where response header transform rules are defined. This means that later response header transform rules will still use the original field values when evaluating their filter expressions, not the values changed by previous rules. Refer to Field values during rule evaluation for more information.

Troubleshooting

When troubleshooting Response Header Transform Rules, use Cloudflare Trace to determine if a rule is triggering for a specific URL.

PreviousAPI parameter referenceNextCreate a rule in the dashboard

Was this helpful?

YesNo

Edit pageReport issue

On this page

Overview

Important remarks

Troubleshooting

Edit pageReport issue

Getting started
PlansContact salesPartnersFind a partnerStartupsUnder attack?Domain name search

Company
AboutCareersInvestorsPressPress kitGlobal network

Public interest
Project GalileoAthenian ProjectCloudflare for CampaignsProject FairshotImpact/ESG

Compliance
Compliance resourcesTrust HubData ProtectionResponsible AITransparency reportReport abuse

Resources
App innovation reportCloudflare RadarCase studiesStatusSupportEventsBlog

Developers
DocumentationLearning centerCommunity

Solutions
SSE and SASE platformCloudflare AI CloudAI SecurityFrontend Development PlatformMulti-Tenant Platform DevelopmentWeb Security Platform

Start BuildingLog In

© 2026 Cloudflare, Inc.

Privacy policy|Report security issues|Terms of use|Trademark
|
Your privacy choices

Docs

------
导航页打开网址