导航|地址|刷新
Always Use HTTPS

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/ssl/llms.txt
Use this file to discover all available pages before exploring further.

Docs Directory API SDKs Changelog

Search

Log in

SSL/TLS

/

Overview

Concepts

Get started

Edge certificates

Overview

Universal SSL

Overview

Enable Universal SSL certificates

Disable Universal SSL certificates

Alerts

Limitations

Troubleshooting

Advanced certificates

Overview

Manage advanced certificates

API commands

Custom certificates

Overview

Manage custom certificates

Renewal and expiration

Bundle methodologies

Remove key file password

Troubleshooting

Enforce HTTPS connections

Domain control validation (DCV)

Overview

Methods

Overview

Delegated

TXT

HTTP

Validation backoff schedule

Domain control validation flow

Troubleshooting

Geo Key ManagerBeta

Overview

Setup

Supported options

Add CAA records

Staging environmentBeta

Backup certificates

ECH ProtocolBeta

Additional options

Cipher suites

About

Customize cipher suites

Overview

Use the dashboard

Use the API

Security levels

Compliance standards

Supported cipher suites

Troubleshooting

Certificate Transparency MonitoringBeta

HTTP Strict Transport Security (HSTS)

Certificate Signing Requests (CSRs)

TLS 1.3

Minimum TLS Version

Automatic HTTPS Rewrites

Total TLS

Overview

Enable

Error messages

Always Use HTTPS

Opportunistic Encryption

Origin server

Encryption modes

Overview

Off (no encryption)

Flexible

Full

Full (strict)

Strict (SSL-Only Origin Pull)

Automatic key exchange to origins

SSL/TLS RecommenderDeprecated

Cloudflare origin CA

Setup

Troubleshooting

Authenticated Origin Pulls (mTLS)

Overview

About

AWS integration

Setup

Global

Zone-level

Per-hostname

Manage certificates

Rollback

Custom Origin Trust Store

Cipher suites

Client certificates (mTLS)

Overview

Create a client certificate

Enable mTLS

Bring your own CA (BYOCA)

Forward certificate to server

Label client certificates

Revoke a client certificate

Configure your mobile app or IoT device

Client certificate variables

Troubleshooting

mTLS for Zero Trust ↗

Cloudflare for SaaS ↗

Keyless SSL

Overview

Get started

Cloudflare Tunnel

Public DNS

Run with Docker

Hardware security modules

Overview

Configuration

AWS cloud HSM

Azure Dedicated HSM

Azure Managed HSM

Entrust nShield Connect

Fortanix DSM

Google Cloud HSM

IBM Cloud HSM

SoftHSMv2

Upgrade your key server

Reference

High availability

Scaling and benchmarking

Key server metrics

Keyless delegation

Glossary

Troubleshooting

Post-quantum

About PQC

PQC support

PQC in Cloudflare products

PQC to your origin

PQC and Cloudflare One

Reference

TLS protocols

Certificate and hostname priority

Certificate authorities

Browser compatibility

Migration guides

Entrust distrust

DigiCert G1 distrust

Rotate ACM certificate packs

Certificate pinning

Certificate statuses

Validity periods and renewal

Features and plans

Cloudflare and CVE-2019-1559

PCI compliance and vulnerabilities mitigation

Troubleshooting

Full resources list

General SSL errors

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

ERR_SSL_PROTOCOL_ERROR

ERR_TOO_MANY_REDIRECTS

Mixed content errors

FAQ

Changelog

Agent resources

Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

SSL/TLS llms.txt ↗

SSL/TLS llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗

Home

/SSL/TLS

/…
Edge certificates

/Additional options

/Always Use HTTPS

Always Use HTTPS

Last updated Apr 27, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewAvailabilityEncrypt all visitor trafficLimitations

Always Use HTTPS redirects all your visitor requests from http to https, for all subdomains and hosts in your application.

Note

This process does not impact certificate validation. If you use HTTP DCV, you can still enable Always Use HTTPS.

Cloudflare recommends not performing redirects at your origin web server, as this can cause redirect loop errors.

Availability

Free Pro Business Enterprise

Availability

Yes

Yes

Yes

Yes

Encrypt all visitor traffic

To redirect traffic for all subdomains and hosts in your application, you can enable Always Use HTTPS.

Note

If only some parts of your application can support HTTPS traffic, do not enable Always Use HTTPS and use a single redirect to selectively perform the redirect to HTTPS. Refer to Redirect admin area requests to HTTPS for an example.

To enable Always Use HTTPS in the dashboard:

In the Cloudflare dashboard, go to the SSL/TLS Overview page.
Go to Overview ↗

Make sure that your SSL/TLS encryption mode is not set to Off. When you set your encryption mode to Off, the Always Use HTTPS option will not be visible in your Cloudflare dashboard.

Go to the Edge Certificates ↗ page.

Turn on Always Use HTTPS.

To enable or disable Always Use HTTPS with the API:

Make sure that your SSL/TLS encryption modeis not set to Off.

Send a PATCH request with always_use_https as the setting name in the URI path, and the value parameter set to your desired setting ("on" or "off").

Limitations

Forcing HTTPS does not resolve issues with mixed content, as browsers check the protocol of included resources before making a request. You will need to use only relative links or HTTPS links on pages that you force to HTTPS. Cloudflare can automatically resolve some mixed-content links using our Automatic HTTPS Rewrites functionality.

PreviousError messagesNextOpportunistic Encryption

Was this helpful?

YesNo

Edit pageReport issue

On this page

Overview

Availability

Encrypt all visitor traffic

Limitations

Edit pageReport issue

Getting started
PlansContact salesPartnersFind a partnerStartupsUnder attack?Domain name search

Company
AboutCareersInvestorsPressPress kitGlobal network

Public interest
Project GalileoAthenian ProjectCloudflare for CampaignsProject FairshotImpact/ESG

Compliance
Compliance resourcesTrust HubData ProtectionResponsible AITransparency reportReport abuse

Resources
App innovation reportCloudflare RadarCase studiesStatusSupportEventsBlog

Developers
DocumentationLearning centerCommunity

Solutions
SSE and SASE platformCloudflare AI CloudAI SecurityFrontend Development PlatformMulti-Tenant Platform DevelopmentWeb Security Platform

Start BuildingLog In

© 2026 Cloudflare, Inc.

Privacy policy|Report security issues|Terms of use|Trademark
|
Your privacy choices

Docs

------
导航页打开网址