导航|地址|刷新
Transform Rules configuration using Terr…

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/terraform/llms.txt
Use this file to discover all available pages before exploring further.



DocsDirectoryAPISDKsChangelog

Search

Log in






Terraform

/




Overview

Get started


Tutorials


Overview

1 – Initialize Terraform

2 – Track your history

3 – Configure HTTPS settings

4 – Improve performance

5 – Add exceptions with Page Rules

6 – Revert configuration






Additional configurations


WAF Managed Rules

DDoS managed rulesets

Rate limiting rules

WAF custom rules

Transform Rules

Single Redirects ↗

Bulk Redirects ↗

Configuration Rules ↗

Origin Rules ↗

Cache Rules ↗

Snippets ↗

Workers ↗






How-to guides


Create a partial zone

Create a subdomain zone






Advanced topics


Best practices

Import Cloudflare resources

Provider customization

Remote R2 backend






Troubleshooting


Create DNS records error

Rule IDs change when making updates






Agent resources


Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

Terraform llms.txt ↗

Terraform llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗













Home

/Terraform

/Additional configurations

/Transform Rules



Transform Rules configuration using Terraform


Last updated Apr 29, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewBefore you start Obtain the necessary account or zone IDs Import or delete existing rulesetsCreate a URL rewrite ruleCreate a request header transform ruleCreate a response header transform ruleConfigure Managed Transforms




This page provides examples of creating Transform Rules in a zone using Terraform. The examples cover the following scenarios:

Create a URL rewrite rule

Create a request header transform rule

Create a response header transform rule

Configure Managed Transforms

If you are using the Cloudflare API, refer to the following resources:

Create a URL rewrite rule via API

Create a request header transform rule via API

Create a response header transform rule via API

Configure Managed Transforms


Before you start



Obtain the necessary account or zone IDs


The Terraform configurations provided in this page need the zone ID (or account ID) of the zone/account where you will deploy rulesets.

To retrieve the list of accounts you have access to, including their IDs, use the List accounts operation.

To retrieve the list of zones you have access to, including their IDs, use the List zones operation.


Import or delete existing rulesets


Terraform assumes that it has complete control over account and zone rulesets. If you already have rulesets configured in your account or zone, do one of the following:

Import existing rulesets to Terraform using the cf-terraforming tool. Recent versions of the tool can generate resource definitions for existing rulesets and import their configuration to Terraform state.

Start from scratch by deleting existing rulesets (account and zone rulesets with "kind": "root" and "kind": "zone", respectively) and then defining your rulesets configuration in Terraform.

------


Create a URL rewrite rule


The following example creates a URL rewrite rule that rewrites requests for example.com/old-folder to example.com/new-folder:






Required API token permissions

All of the following token permissions are required:

Zone Transform Rules Write

Account Rulesets Read

Configure the cloudflare_ruleset ↗ resource:
resource "cloudflare_ruleset" "transform_url_rewrite" { zone_id = var.cloudflare_zone_id name = "Transform Rule performing a static URL rewrite" description = "" kind = "zone" phase = "http_request_transform" rules = [{ ref = "url_rewrite_old_folder" description = "Example URL rewrite rule" expression = "(http.host eq \"example.com\" and http.request.uri.path eq \"/old-folder\")" action = "rewrite" action_parameters = { uri = { path = { value = "/new-folder" } } } }]}

resource "cloudflare_ruleset" "transform_url_rewrite" { zone_id = "<ZONE_ID>" name = "Transform Rule performing a static URL rewrite" description = "" kind = "zone" phase = "http_request_transform" rules { ref = "url_rewrite_old_folder" description = "Example URL rewrite rule" expression = "(http.host eq \"example.com\" and http.request.uri.path eq \"/old-folder\")" action = "rewrite" action_parameters { uri { path { value = "/new-folder" } } } }}
To create another URL rewrite rule, add a new rules object to the same cloudflare_ruleset resource.




Use the ref field to get stable rule IDs across updates when using Terraform. Adding this field prevents Terraform from recreating the rule on changes. For more information, refer to Troubleshooting.


For more information on rewriting URLs, refer to URL Rewrite Rules.


Create a request header transform rule


The following configuration example performs the following adjustments to HTTP request headers:

Adds a my-header-1 header to the request with a static value.

Adds a my-header-2 header to the request with a dynamic value defined by an expression.

Deletes the existing-header header from the request, if it exists.






Required API token permissions

All of the following token permissions are required:

Zone Transform Rules Write

Account Rulesets Read

Configure the cloudflare_ruleset ↗ resource:
resource "cloudflare_ruleset" "transform_modify_request_headers" { zone_id = var.cloudflare_zone_id name = "Transform Rule performing HTTP request header modifications" description = "" kind = "zone" phase = "http_request_late_transform" rules = [{ ref = "modify_request_headers" description = "Example request header transform rule" expression = "true" action = "rewrite" action_parameters = { headers = { "my-header-1" = { operation = "set" value = "Fixed value" } "my-header-2" = { operation = "set" expression = "cf.zone.name" } "existing-header" = { operation = "remove" } } } }]}

resource "cloudflare_ruleset" "transform_modify_request_headers" { zone_id = "<ZONE_ID>" name = "Transform Rule performing HTTP request header modifications" description = "" kind = "zone" phase = "http_request_late_transform" rules { ref = "modify_request_headers" description = "Example request header transform rule" expression = "true" action = "rewrite" action_parameters { headers { name = "my-header-1" operation = "set" value = "Fixed value" } headers { name = "my-header-2" operation = "set" expression = "cf.zone.name" } headers { name = "existing-header" operation = "remove" } } }}
To create another request header transform rule, add a new rules object to the same cloudflare_ruleset resource.




Use the ref field to get stable rule IDs across updates when using Terraform. Adding this field prevents Terraform from recreating the rule on changes. For more information, refer to Troubleshooting.

For more information on modifying request headers, refer to Request Header Transform Rules.


Create a response header transform rule


The following configuration example performs the following adjustments to HTTP response headers:

Adds a my-header-1 header to the response with a static value.

Adds a my-header-2 header to the response with a dynamic value defined by an expression.

Deletes the existing-header header from the response, if it exists.






Required API token permissions

All of the following token permissions are required:

Zone Transform Rules Write

Account Rulesets Read

Configure the cloudflare_ruleset ↗ resource:
resource "cloudflare_ruleset" "transform_modify_response_headers" { zone_id = var.cloudflare_zone_id name = "Transform Rule performing HTTP response header modifications" description = "" kind = "zone" phase = "http_response_headers_transform" rules = [{ ref = "modify_response_headers" description = "Example response header transform rule" expression = "true" action = "rewrite" action_parameters = { headers = { "my-header-1" = { operation = "set" value = "Fixed value" } "my-header-2" = { operation = "set" expression = "cf.zone.name" } "existing-header" = { operation = "remove" } } } }]}

resource "cloudflare_ruleset" "transform_modify_response_headers" { zone_id = "<ZONE_ID>" name = "Transform Rule performing HTTP response header modifications" description = "" kind = "zone" phase = "http_response_headers_transform" rules { ref = "modify_response_headers" description = "Example response header transform rule" expression = "true" action = "rewrite" action_parameters { headers { name = "my-header-1" operation = "set" value = "Fixed value" } headers { name = "my-header-2" operation = "set" expression = "cf.zone.name" } headers { name = "existing-header" operation = "remove" } } }}
To create another response header transform rule, add a new rules object to the same cloudflare_ruleset resource.




Use the ref field to get stable rule IDs across updates when using Terraform. Adding this field prevents Terraform from recreating the rule on changes. For more information, refer to Troubleshooting.

For more information on modifying response headers, refer to Response Header Transform Rules.


Configure Managed Transforms







Required API token permissions

All of the following token permissions are required:

Managed headers Write

Account Rulesets Read

Configure the cloudflare_managed_transforms ↗ resource:
resource "cloudflare_managed_transforms" "tf_example" { zone_id = var.cloudflare_zone_id managed_request_headers = [{ id = "add_visitor_location_headers" enabled = true }] managed_response_headers = [{ id = "remove_x-powered-by_header" enabled = true }]}

resource "cloudflare_managed_headers" "tf_example" { zone_id = "<ZONE_ID>" managed_request_headers { id = "add_visitor_location_headers" enabled = true } managed_response_headers { id = "remove_x-powered-by_header" enabled = true }}



Make sure you include the Managed Transforms you are updating in the correct object (managed_request_headers or managed_response_headers).

For more information on Managed Transforms, refer to Managed Transforms.


PreviousWAF custom rulesNextSingle Redirects ↗


Was this helpful?

YesNo

Edit pageReport issue




On this page

Overview

Before you start

Obtain the necessary account or zone IDs

Import or delete existing rulesets

Create a URL rewrite rule

Create a request header transform rule

Create a response header transform rule

Configure Managed Transforms


Edit pageReport issue














Getting started
PlansContact salesPartnersFind a partnerStartupsUnder attack?Domain name search


Company
AboutCareersInvestorsPressPress kitGlobal network




Public interest
Project GalileoAthenian ProjectCloudflare for CampaignsProject FairshotImpact/ESG


Compliance
Compliance resourcesTrust HubData ProtectionResponsible AITransparency reportReport abuse




Resources
App innovation reportCloudflare RadarCase studiesStatusSupportEventsBlog


Developers
DocumentationLearning centerCommunity




Solutions
SSE and SASE platformCloudflare AI CloudAI SecurityFrontend Development PlatformMulti-Tenant Platform DevelopmentWeb Security Platform


Start BuildingLog In












© 2026 Cloudflare, Inc.

Privacy policy|Report security issues|Terms of use|Trademark
|
Your privacy choices








Docs




------
导航页 打开网址