导航|地址|刷新
developers.cloudflare.com

--- description: Manage your Cloudflare configuration as infrastructure as code using the Terraform provider. title: Cloudflare Terraform provider image: https://developers.cloudflare.com/og-docs.png --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/terraform/llms.txt > Use this file to discover all available pages before exploring further. # Cloudflare Terraform provider Last updated Apr 21, 2026|Copy as Markdown|[View as Markdown](https://developers.cloudflare.com/terraform/index.md)|[Agent setup](https://developers.cloudflare.com/agent-setup/) Configure Cloudflare using HashiCorp's “Infrastructure as Code” tool, Terraform. With [Cloudflare’s Terraform provider ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs), you can manage the Cloudflare global network using the same familiar tools you use to automate the rest of your infrastructure. Define and store configuration in source code repositories like GitHub, track and version changes over time, and roll back when needed — all without needing to use the Cloudflare APIs. Report Terraform configuration issues via [GitHub ↗](https://github.com/cloudflare/terraform-provider-cloudflare/issues/new/choose). Was this helpful? YesNo ## On this page [Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"WebPage","@id":"https://developers.cloudflare.com/terraform/#page","headline":"Overview · Cloudflare Terraform docs","description":"Manage your Cloudflare configuration as infrastructure as code using the Terraform provider.","url":"https://developers.cloudflare.com/terraform/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-04-21","publisher":{"@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com/"},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ``` --- --- description: Install Terraform and configure the Cloudflare provider on your operating system. title: Get started image: https://developers.cloudflare.com/og-docs.png --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/terraform/llms.txt > Use this file to discover all available pages before exploring further. # Get started Last updated Apr 21, 2026|Copy as Markdown|[View as Markdown](https://developers.cloudflare.com/terraform/installing/index.md)|[Agent setup](https://developers.cloudflare.com/agent-setup/) Terraform ships as a single binary file. The examples below include installation information for popular operating systems. For official instructions on installing Terraform, refer to [Install Terraform ↗](https://developer.hashicorp.com/terraform/tutorials/certification-associate-tutorials/install-cli). Caution Terraform maintains your configuration state, which can be broken when you make configuration changes through both Terraform and either the Cloudflare Dashboard or API. To avoid this state, make sure you manage Terraform resources only in Terraform. For more details, refer to our [best practices](https://developers.cloudflare.com/terraform/advanced-topics/best-practices/). ## Mac The easiest way to install Terraform on macOS is with Homebrew. ```sh brew tap hashicorp/tap brew install hashicorp/tap/terraform ``` ## Linux You can install the `terraform` binary via your distribution's package manager. For example: ```sh sudo apt install terraform ``` Alternatively, you can fetch a specific version directly and place the binary in your `PATH`: ```sh wget -q https://releases.hashicorp.com/terraform/1.4.5/terraform_1.4.5_linux_amd64.zip unzip terraform_1.4.5_linux_amd64.zip ``` ```sh Archive: terraform_1.4.5_linux_amd64.zip inflating: terraform ``` ```sh sudo mv terraform /usr/local/bin/terraform terraform version ``` ```sh Terraform v1.4.5 ``` ## Windows 1. Download the 32 or 64-bit executable from the [Download Terraform ↗](https://developer.hashicorp.com/terraform/downloads) page. 2. Unzip and place `terraform.exe` somewhere in your path. ## Other For additional installers, refer to the [Download Terraform ↗](https://developer.hashicorp.com/terraform/downloads) page. Was this helpful? YesNo ## On this page [Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/terraform/installing/#page","headline":"Install Terraform · Cloudflare Terraform docs","description":"Install Terraform and configure the Cloudflare provider on your operating system.","url":"https://developers.cloudflare.com/terraform/installing/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-04-21","publisher":{"@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com/"},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ``` --- --- description: Step-by-step Cloudflare Terraform tutorials from initialization to advanced configuration. title: Tutorials image: https://developers.cloudflare.com/og-docs.png --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/terraform/llms.txt > Use this file to discover all available pages before exploring further. # Tutorials Last updated Apr 21, 2026|Copy as Markdown|[View as Markdown](https://developers.cloudflare.com/terraform/tutorial/index.md)|[Agent setup](https://developers.cloudflare.com/agent-setup/) Before you begin, [install Terraform](https://developers.cloudflare.com/terraform/installing/). Each tutorial builds on the previous, so you should complete the tutorials in the order shown below. Note If you are upgrading from v4, review the [migration guide ↗](https://github.com/cloudflare/terraform-provider-cloudflare/blob/main/docs/guides/version-5-upgrade.md) for breaking changes. ## [1 – Initialize Terraform](https://developers.cloudflare.com/terraform/tutorial/initialize-terraform/) * Brief introduction. * Introduction of `terraform init`, `plan`, `apply`, and `show`. * Resource covered: [cloudflare\_dns\_record ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/dns%5Frecord) (DNS record). ## [2 – Track your history](https://developers.cloudflare.com/terraform/tutorial/track-history/) * Store Cloudflare configuration in source control. ## [3 – Configure HTTPS settings](https://developers.cloudflare.com/terraform/tutorial/configure-https-settings/) * Modify zone settings. * Resource covered: [cloudflare\_zone\_setting ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/zone%5Fsetting). ## [4 – Improve performance and reliability](https://developers.cloudflare.com/terraform/tutorial/use-load-balancing/) * Add load balancing rules. * Resources covered: * [cloudflare\_load\_balancer ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/load%5Fbalancer) * [cloudflare\_load\_balancer\_pool ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/load%5Fbalancer%5Fpool) * [cloudflare\_load\_balancer\_monitor ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/load%5Fbalancer%5Fmonitor) ## [5 – Add exceptions with page rules](https://developers.cloudflare.com/terraform/tutorial/add-page-rules/) * Add page rule. * Resource covered: [cloudflare\_page\_rule ↗](https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs/resources/page%5Frule). * Increase security level for a specific URL: `/expensive-db-call`. * Add a redirect (URL forward) with a `301` status code from `/old-location.php` to `/expensive-db-call`. ## [6 – Revert configuration](https://developers.cloudflare.com/terraform/tutorial/revert-configuration/) * Review change history. * Roll back changes. Was this helpful? YesNo ## On this page [Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"WebPage","@id":"https://developers.cloudflare.com/terraform/tutorial/#page","headline":"Tutorials · Cloudflare Terraform docs","description":"Step-by-step Cloudflare Terraform tutorials from initialization to advanced configuration.","url":"https://developers.cloudflare.com/terraform/tutorial/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-04-21","publisher":{"@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com/"},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ``` --- --- description: Page Rules let you override zone settings for specific URL patterns. Redirects old URLs with a 301 permanent redirect. title: 5 – Add exceptions with Page Rules image: https://developers.cloudflare.com/og-docs.png --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/terraform/llms.txt > Use this file to discover all available pages before exploring further. # 5 – Add exceptions with Page Rules Last updated May 5, 2026|Copy as Markdown|[View as Markdown](https://developers.cloudflare.com/terraform/tutorial/add-page-rules/index.md)|[Agent setup](https://developers.cloudflare.com/agent-setup/) In the [Configure HTTPS settings](https://developers.cloudflare.com/terraform/tutorial/configure-https-settings/) tutorial, you configured zone settings that apply to all incoming requests for `example.com`. In this tutorial, you will add an exception to these settings using [Page Rules](https://developers.cloudflare.com/rules/page-rules/). Specifically, you will increase the security level for a URL known to be expensive to render and cannot be cached: `https://www.example.com/expensive-db-call`. Additionally, you will add a redirect from the previous URL used to host this page. Note Terraform code snippets below refer to the v5 SDK only. ## 1\. Create Page Rules configuration Create a new branch and append the configuration. ```bash git checkout -b step5-pagerule ``` Page Rules let you override zone settings for specific URL patterns. Add two Page Rules to your `main.tf`: ```hcl # Increase security for expensive database operations resource "cloudflare_page_rule" "expensive_endpoint_security" { zone_id = var.zone_id target = "${var.domain}/expensive-db-call" priority = 1 actions = { security_level = "under_attack" } } # Redirect old URLs to new location resource "cloudflare_page_rule" "legacy_redirect" { zone_id = var.zone_id target = "${var.domain}/old-location.php" priority = 2 actions = { forwarding_url = { url = "https://www.${var.domain}/expensive-db-call" status_code = 301 } } } ``` The first rule increases security to "Under Attack" mode for your database endpoint. The second rule redirects old URLs with a 301 permanent redirect. ## 2\. Preview and apply the changes: ```sh terraform plan terraform apply ``` ## 3\. Verify changes: Test the redirect functionality: ```bash curl -I https://example.com/old-location.php ``` Expected output: ```bash HTTP/1.1 301 Moved Permanently Location: https://example.com/expensive-db-call ``` Test the increased security (Under Attack mode returns a challenge page): ```bash curl -I https://example.com/expensive-db-call ``` Expected output: ```bash HTTP/1.1 503 Service Temporarily Unavailable ``` The 503 response indicates the Under Attack mode is active, presenting visitors with a challenge page before allowing access to protect against DDoS attacks. ## 4\. Commit and merge the changes: ```bash git add main.tf git commit -m "Step 5 - Add two Page Rules" git push ``` The call works as expected. In the first case, the Cloudflare global network responds with a `301` redirecting the browser to the new location. In the second case, the Cloudflare global network initially responds with a `503`, which is consistent with the Under Attack mode. Was this helpful? YesNo ## On this page [Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/terraform/tutorial/add-page-rules/#page","headline":"Add exceptions with Page Rules · Cloudflare Terraform docs","description":"Page Rules let you override zone settings for specific URL patterns. Redirects old URLs with a 301 permanent redirect.","url":"https://developers.cloudflare.com/terraform/tutorial/add-page-rules/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-05-05","publisher":{"@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com/"},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ``` --- --- description: This tutorial shows how to enable TLS 1.3, Automatic HTTPS Rewrites, and Strict SSL mode using the updated v5 provider. title: 3 – Configure HTTPS settings image: https://developers.cloudflare.com/og-docs.png --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/terraform/llms.txt > Use this file to discover all available pages before exploring further. # 3 – Configure HTTPS settings Last updated May 5, 2026|Copy as Markdown|[View as Markdown](https://developers.cloudflare.com/terraform/tutorial/configure-https-settings/index.md)|[Agent setup](https://developers.cloudflare.com/agent-setup/) After setting up basic DNS records, you can configure zone settings using Terraform. This tutorial shows how to enable [TLS 1.3](https://developers.cloudflare.com/ssl/edge-certificates/additional-options/tls-13/), [Automatic HTTPS Rewrites](https://developers.cloudflare.com/ssl/edge-certificates/additional-options/automatic-https-rewrites/), and [Strict SSL mode](https://developers.cloudflare.com/ssl/origin-configuration/ssl-modes/full-strict/) using the updated v5 provider. ## Prerequisites * Completed tutorials [1](https://developers.cloudflare.com/terraform/tutorial/initialize-terraform/) and [2](https://developers.cloudflare.com/terraform/tutorial/track-history/) * Valid SSL certificate on your origin server (use the [Cloudflare Origin CA](https://developers.cloudflare.com/ssl/origin-configuration/origin-ca/) to generate one for strict SSL mode) Note Terraform code snippets below refer to the v5 SDK only. ## 1\. Create zone setting configuration Create a new branch and add zone settings: ```bash git checkout -b step3-zone-settings ``` Add the following to your `main.tf` file: ```hcl # Enable TLS 1.3 resource "cloudflare_zone_setting" "tls_1_3" { zone_id = var.zone_id setting_id = "tls_1_3" value = "on" } # Enable automatic HTTPS rewrites resource "cloudflare_zone_setting" "automatic_https_rewrites" { zone_id = var.zone_id setting_id = "automatic_https_rewrites" value = "on" } # Set SSL mode to strict resource "cloudflare_zone_setting" "ssl" { zone_id = var.zone_id setting_id = "ssl" value = "strict" } ``` ## 2\. Preview and apply the changes Review the proposed changes: ```sh terraform plan ``` Expected output ```sh Plan: 3 to add, 0 to change, 0 to destroy. Terraform will perform the following actions: # cloudflare_zone_setting.automatic_https_rewrites will be created + resource "cloudflare_zone_setting" "automatic_https_rewrites" { + setting_id = "automatic_https_rewrites" + value = "on" + zone_id = "your-zone-id" } # cloudflare_zone_setting.ssl will be created + resource "cloudflare_zone_setting" "ssl" { + setting_id = "ssl" + value = "strict" + zone_id = "your-zone-id" } # cloudflare_zone_setting.tls_1_3 will be created + resource "cloudflare_zone_setting" "tls_1_3" { + setting_id = "tls_1_3" + value = "on" + zone_id = "your-zone-id" } ``` Commit and merge the changes: ```bash git add main.tf git commit -m "Step 3 - Enable TLS 1.3, automatic HTTPS rewrites, and strict SSL" git checkout main git merge step3-zone-settings git push ``` Before applying the changes, try to connect with TLS 1.3\. Technically, you should not be able to with default settings. To follow along with this test, you will need to [compile curl against BoringSSL ↗](https://everything.curl.dev/source/build/tls/boringssl#build-boringssl). ```sh curl -v --tlsv1.3 https://www.example.com 2>&1 | grep "SSL connection\|error" ``` As shown above, you should receive an error because TLS 1.3 is not yet enabled on your zone. Enable it by running `terraform apply` and try again. Apply the configuration: ```sh terraform apply ``` Type `yes` when prompted. ## 3\. Verify the settings Try the same command as before. The command will now succeed. ```sh curl -v --tlsv1.3 https://www.example.com 2>&1 | grep "SSL connection\|error" ``` Was this helpful? YesNo ## On this page [Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/terraform/tutorial/configure-https-settings/#page","headline":"Configure HTTPS settings · Cloudflare Terraform docs","description":"This tutorial shows how to enable TLS 1.3, Automatic HTTPS Rewrites, and Strict SSL mode using the updated v5 provider.","url":"https://developers.cloudflare.com/terraform/tutorial/configure-https-settings/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-05-05","publisher":{"@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com/"},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ``` --- --- description: This tutorial shows you how to get started with Terraform. You will create a DNS record pointing www.example.com to a web server at 203.0.113.10. title: 1 – Initialize Terraform image: https://developers.cloudflare.com/og-docs.png --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentation index at: https://developers.cloudflare.com/terraform/llms.txt > Use this file to discover all available pages before exploring further. # 1 – Initialize Terraform Last updated May 5, 2026|Copy as Markdown|[View as Markdown](https://developers.cloudflare.com/terraform/tutorial/initialize-terraform/index.md)|[Agent setup](https://developers.cloudflare.com/agent-setup/) This tutorial shows you how to get started with Terraform. You just signed up your domain (`example.com`) on Cloudflare to manage everything in Terraform and now you will create a DNS record pointing `www.example.com` to a web server at `203.0.113.10`. Before you begin, ensure you have: * [Installed Terraform](https://developers.cloudflare.com/terraform/installing/) * [Created an API Token](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/) with permissions to edit resources for this tutorial Note Terraform code snippets below refer to the v5 SDK only. ## 1\. Create your configuration Create a file named `main.tf`, filling in your own values for the [API token](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/), [zone ID](https://developers.cloudflare.com/fundamentals/account/find-account-and-zone-ids/), [account ID](https://developers.cloudflare.com/fundamentals/account/find-account-and-zone-ids/), and [domain](https://developers.cloudflare.com/fundamentals/manage-domains/add-site/): ```bash terraform { required_providers { cloudflare = { source = "cloudflare/cloudflare" version = "~> 5" } } } provider "cloudflare" { api_token = "" } variable "zone_id" { default = "" } variable "account_id" { default = "" } variable "domain" { default = "" } resource "cloudflare_dns_record" "www" { zone_id = "" name = "www" content = "203.0.113.10" type = "A" ttl = 1 proxied = true comment = "Domain verification record" } ``` Caution To prevent accidentally exposing your Cloudflare credentials, do not save this file in your version control system. The [next tutorial](https://developers.cloudflare.com/terraform/tutorial/track-history/) will cover best practices for passing in your API token. ## 2\. Initialize and plan Initialize Terraform to download the Cloudflare provider: ```sh terraform init ``` Review what will be created: ```sh terraform plan ``` ```sh Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create Terraform will perform the following actions: # cloudflare_dns_record.www will be created + resource "cloudflare_dns_record" "www" { + comment = "Domain verification record" + comment_modified_on = (known after apply) + content = "203.0.113.10" + created_on = (known after apply) + id = (known after apply) + meta = (known after apply) + modified_on = (known after apply) + name = "www" + proxiable = (known after apply) + proxied = true + settings = (known after apply) + tags = (known after apply) + tags_modified_on = (known after apply) + ttl = 1 + type = "A" + zone_id = "" } Plan: 1 to add, 0 to change, 0 to destroy. ``` ## 3\. Apply and verify Apply your configuration: ```sh terraform apply ``` Type `yes` when prompted. ```sh Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create Terraform will perform the following actions: # cloudflare_dns_record.www will be created + resource "cloudflare_dns_record" "www" { + comment = "Domain verification record" + comment_modified_on = (known after apply) + content = "203.0.113.10" + created_on = (known after apply) + id = (known after apply) + meta = (known after apply) + modified_on = (known after apply) + name = "www" + proxiable = (known after apply) + proxied = true + settings = (known after apply) + tags = (known after apply) + tags_modified_on = (known after apply) + ttl = 1 + type = "A" + zone_id = "" } Plan: 1 to add, 0 to change, 0 to destroy. Do you want to perform these actions? Terraform will perform the actions described above. Only 'yes' will be accepted to approve. Enter a value: yes cloudflare_dns_record.www: Creating... cloudflare_dns_record.www: Creation complete after 0s Apply complete! Resources: 1 added, 0 changed, 0 destroyed. ``` After creation, verify the DNS record: ```sh dig www.example.com ``` Test the web server response: ```sh curl https://www.example.com ``` ```sh Hello, this is 203.0.113.10! ``` To see the full results returned from the API call: ```sh terraform show ``` You can also check the Cloudflare dashboard and go to the **DNS** \> **Records** page. [Go to **Account home** ↗](https://dash.cloudflare.com/?to=/:account/home) Was this helpful? YesNo ## On this page [Docs](https://developers.cloudflare.com/) ```json {"@context":"https://schema.org","@type":"TechArticle","@id":"https://developers.cloudflare.com/terraform/tutorial/initialize-terraform/#page","headline":"Introduction to Terraform init · Cloudflare Terraform docs","description":"This tutorial shows you how to get started with Terraform. You will create a DNS record pointing www.example.com to a web server at 203.0.113.10.","url":"https://developers.cloudflare.com/terraform/tutorial/initialize-terraform/","inLanguage":"en","image":"https://developers.cloudflare.com/og-docs.png","dateModified":"2026-05-05","publisher":{"@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com/"},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}} ``` --- --- description: Sometimes, you may have to roll back configuration changes. To revert your configuration, check out the desired branch and ask Terraform to move your Cloudflare settings back in time. title: 6 – Revert configuration image: https://developers.cloudflare.com/og-docs.png --- [Skip to content](#main-content) > Documentation Index > Fetch the complete documentati
…