导航|地址|刷新
HTTP/2 to Origin

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/speed/llms.txt
Use this file to discover all available pages before exploring further.



DocsDirectoryAPISDKsChangelog

Search

Log in






Speed

/




Overview


Observatory (beta)Beta


Overview

Observatory dashboard

Run test

Understand test results

RUM beacon for Web Analytics

FAQ





Origin Analytics


Settings


Recommendations

Measurement


Image optimization


Image Resizing ↗

Polish ↗

MirageDeprecated


Troubleshooting


Image optimization on optimized images

Polish statuses ↗

Troubleshoot missing images










Content optimizations


Automatic Platform Optimization ↗

Content compression

Shared dictionariesBeta


Cloudflare FontsBeta


Overview

FAQ

Troubleshooting





Early Hints ↗

Prefetch URLs


Rocket Loader


Overview

Enable

Ignore JavaScripts





Smart Hints

Speed BrainBeta


Troubleshooting


Content encoding issues

Turn off Auto Minify










Protocol optimization


HTTP/2

HTTP/3 (with QUIC)

Enhanced HTTP/2 Prioritization

0-RTT Connection Resumption


Troubleshooting


Enhanced HTTP/2 Prioritization negatively affects iOS/Safari devices

Troubleshoot protocol issues





HTTP/2 to Origin









Smart Shield ↗

Troubleshooting

Aggregated Internet Measurement

Glossary


Agent resources


Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

Speed llms.txt ↗

Speed llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗













Home

/Speed

/…
Settings


/Protocol optimization

/HTTP/2 to Origin



HTTP/2 to Origin


Last updated Jul 23, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewAvailabilityDisable HTTP/2 to OriginConnection multiplexing How it works Benefits Default behavior by plan Configuration Timeouts and error codes Common scenarios FAQProtocol compatibility




A protocol is a set of rules governing the exchange or transmission of data between devices. One of the most important protocols that run on the human-computer interaction layer, where applications can access the network services, is HTTP (Hypertext Transfer Protocol).

HTTP is a well established protocol that has several versions, and each version adds features that improve performance over the older one. HTTP/1.1 and HTTP/2 are widely deployed on the Internet today. HTTP/1.1 has been around for more than a decade, but in 2015 the IETF (Internet Engineering Task Force) introduced HTTP/2, which introduces several features to reduce page load times. To know more about the differences between HTTP/1.1 and HTTP/2, please refer to HTTP/2 versus HTTP/1.1 ↗.


Availability

	Free	Pro	Business	Enterprise
Availability	Yes	Yes	Yes	Yes

Disable HTTP/2 to Origin


At Cloudflare, HTTP/2 connection to the origin is enabled by default.

If you wish to disable HTTP/2 to Origin, you can follow these steps:


In the Cloudflare dashboard, go to the Speed > Settings page.
Go to Settings ↗


Go to the Protocol Optimization tab and under HTTP/2 to Origin set the toggle to Off.



Connection multiplexing


Cloudflare supports HTTP/2 multiplexing from its global edge network to your origin servers. Instead of opening a new TCP connection for every incoming request, multiple HTTP/2 streams share a single long-lived TCP connection. This significantly reduces the cost of connection setup and teardown, improving efficiency and performance between Cloudflare and your origin.

By pooling many requests into fewer TCP connections, Cloudflare lowers the number of active connections your origin must maintain — particularly valuable for backends sensitive to connection overhead or resource limits.


How it works


When a new request arrives, Cloudflare attempts to reuse an existing HTTP/2 connection to the origin:

If the connection has not reached its concurrent stream limit, Cloudflare multiplexes the request over that same connection.

If the stream limit has been reached, Cloudflare opens a new TCP connection as needed.

Connections are kept alive and reused until they become idle or hit their concurrency limit.


Connection lifecycle



Connection reuse: Cloudflare maintains persistent (keep-alive) TCP connections to your origin. Reuse continues until the HTTP/2 stream limit is reached or the connection goes idle.



Idle timeout (900s): If a connection remains idle (no active streams) for 900 seconds, Cloudflare closes it. Attempting to reuse a closed connection may result in a 520 error.



Keep-alives: Cloudflare sends periodic TCP keep-alives to detect unresponsive origins. After two unanswered probes, the connection is reset.

First probe after ~30 seconds of inactivity

Second probe after 15 seconds



Connection tear-down: Connections may also close due to:

Load balancing decisions

Data center or node maintenance

Reaching the maximum concurrency limit

Origin or intermediary network closing idle connections



Benefits

Advantage	Description
Fewer TCP handshakes	Multiple requests share a single long-lived TCP connection, minimizing connection churn.
Lower latency	Eliminates repeated TCP/TLS handshakes, reducing round-trip delays for new requests.
Reduced origin load	Fewer concurrent connections for the origin to manage, easing load on resource-constrained systems.
Adaptive scaling	During surges (for example, failovers), Cloudflare reuses available streams first, then opens new connections as needed.

Default behavior by plan

Plan	Default State	Max concurrent streams per connection	Configurable?
Free / Pro / Business	Enabled by default	200	No
Enterprise	Disabled by default (1 stream per connection)	1–200+	Yes

Free/Pro/Business: Multiplexing is automatically enabled. Each connection supports up to 200 concurrent streams.

Enterprise: Multiplexing starts effectively disabled (1 stream). You can enable and configure concurrency per zone (up to 200+ concurrent streams).


Configuration


Connection multiplexing is enabled by default on Free, Pro and Business zones and uses up to 100 concurrent streams by default. Enterprise plans can explicitly configure the maximum number of concurrent streams (often called the “multiplexing ratio”) for a zone in the dashboard or via API.

Dashboard

Log in to the Cloudflare dashboard ↗ and select your account.

Choose the domain that will use HTTP/2 to Origin.

Select Speed > Optimization.

Open the Protocol Optimization tab.

Under HTTP/2 to Origin, select Configure and adjust the stream settings as needed.

API

Required API token permissions
At least one of the following token permissions is required:
Zone Settings Write

Zone Write
Change Origin H2 Max Streams Settingbashcurl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/settings/origin_h2_max_streams" \ --request PATCH \ --header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \ --json '{ "value": 100 }'
Refer to the API documentation for more information.

Terraform
resource "cloudflare_zone_setting" "example" { zone_id = "<ZONE_ID>" setting_id = "origin_h2_max_streams" value = 50}

Note


If your origin does not support multiplexing, enabling HTTP/2 to origin may result in 5xx errors, particularly 520s.

During the HTTP/2 handshake, our edge reads the SETTINGS_MAX_CONCURRENT_STREAMS that your origin advertises, and it will respect that lower limit if your origin is configured with a stricter concurrency cap than Cloudflare's setting. This allows you to control concurrency on a per-origin basis, while still benefiting from Cloudflare's multiplexing framework.




Timeouts and error codes

Condition	Default / Range	Error code	Description
Proxy Read Timeout	125s (up to 6000s for Enterprise)	524	Origin took too long to respond.
Proxy Idle Timeout	900s (fixed)	520	Connection closed due to idleness.
TCP Keep-Alive Interval	30s initial, 15s between probes	520	After two missed probes, Cloudflare resets the connection.
TCP Handshake Timeout	19s	522	Origin did not complete the SYN handshake.
TCP ACK Timeout	90s	522	Origin stopped acknowledging data.

Common scenarios


Failover events

When traffic shifts suddenly (for example, during origin failover), Cloudflare reuses active connections where possible. If concurrency limits are reached, it opens new ones. Active connection counts may spike temporarily, but overall total connections remain lower than without multiplexing.

Long-Lived or idle requests

If your requests exceed 125 seconds (for example, streaming), increase the Proxy Read Timeout (Enterprise only).

Origins that close connections faster than 900 seconds may experience connection churn, but Cloudflare automatically reestablishes new connections as needed.

Potential 5xx errors

Some 5xx errors, like 520 or 522, may be related to idle timeouts or unreachable origins. If concurrency is set too high for an underpowered origin, bursts of simultaneous requests can overwhelm it and lead to stream resets or short spikes of 5xx errors. Enterprise customers who encounter this can ask their Cloudflare account team or support to lower the concurrency limit, which reduces how many requests are sent to the origin at the same time and helps prevent overload.


FAQ



Does Cloudflare use a fixed multiplexing ratio?


Free, Pro, and Business plans use 200 concurrent streams per connection. Enterprise users can configure between 1–200+ streams.


How does Cloudflare scale connections during spikes or failovers?


Cloudflare first reuses existing keep-alive connections. If they reach concurrency limits, new connections are opened as needed. Even during surges, total connection count is typically lower than without multiplexing.


What if my backend is sensitive to parallel requests?


Enterprise users can lower the concurrency limit. Cloudflare also honors your origin's SETTINGS_MAX_CONCURRENT_STREAMS, allowing your server to enforce stricter limits. Cloudflare's CDN also provides Cache Locking, which helps avoid multiple parallel requests to your origin during revalidation. Refer to Revalidation for more information.


Can I gradually roll out higher concurrency?


Yes. You can adjust your origin's HTTP/2 settings or Cloudflare's zone setting incrementally to increase concurrency safely.


From where does Cloudflare connect to my origin?


Cloudflare operates a flat anycast network. Any data center may connect directly to your origin — there is no L1/L2 hierarchy. Origin connections may come from multiple data centers worldwide.


Does Cloudflare prewarm connections to origins?


No. Connections are created on demand and reused where possible. There is no persistent idle pool.


How are idle connections managed?


Idle connections are closed after 900 seconds of inactivity. They are not reopened proactively; new connections are created as traffic resumes.


Can Cloudflare close active TCP connections?


Only if the origin closes them, a network error occurs, or Cloudflare performs maintenance or load redistribution. There is no hard maximum lifetime for active connections.


Protocol compatibility


Note that if the origin does not support HTTP/2, Cloudflare will initiate an HTTP/1.1 connection. We connect to servers who announce support of HTTP/2 connections via ALPN ↗.

If you are unsure if your server supports HTTP/2, we suggest checking your origin server's documentation or using a testing tool for HTTP/2 implementation (for example, h2spec ↗).


PreviousTroubleshoot protocol issuesNextSmart Shield ↗


Was this helpful?

YesNo

Edit pageReport issue




On this page

Overview

Availability

Disable HTTP/2 to Origin

Connection multiplexing

How it works

Benefits

Default behavior by plan

Configuration

Timeouts and error codes

Common scenarios

FAQ

Protocol compatibility


Edit pageReport issue














Getting started
PlansContact salesPartnersFind a partnerStartupsUnder attack?Domain name search


Company
AboutCareersInvestorsPressPress kitGlobal network




Public interest
Project GalileoAthenian ProjectCloudflare for CampaignsProject FairshotImpact/ESG


Compliance
Compliance resourcesTrust HubData ProtectionResponsible AITransparency reportReport abuse




Resources
App innovation reportCloudflare RadarCase studiesStatusSupportEventsBlog


Developers
DocumentationLearning centerCommunity




Solutions
SSE and SASE platformCloudflare AI CloudAI SecurityFrontend Development PlatformMulti-Tenant Platform DevelopmentWeb Security Platform


Start BuildingLog In












© 2026 Cloudflare, Inc.

Privacy policy|Report security issues|Terms of use|Trademark
|
Your privacy choices








Docs




------
导航页 打开网址