cloudflared icon indicating copy to clipboard operation
cloudflared copied to clipboard

Honour SSL/TLS encryption mode setting

Open darius-m opened this issue 2 years ago • 2 comments

Describe the feature you'd like The Cloudflare tunnel always behaves like the Flexible setting is used for SSL/TLS when proxying HTTPS traffic. The service should honour the SSL/TLS configuration and proxy the communication end-to-end encrypted when one of the Full or Full (strict) settings is used.

darius-m avatar Jun 20 '22 17:06 darius-m

Would this allow using ones own certificate without cloudflare terminating tls in-between? If yes then I am also all for this

septatrix avatar Jul 21 '22 19:07 septatrix

Or would this still mean that cloudflare decrypts the traffic because that seems to be the case according to the documentation and graphics at https://developers.cloudflare.com/ssl/origin-configuration/ssl-modes/? I assume that is the case because cloudflare probably also has to look at header to figure out where to redirect the traffic to...if that is the case this means my company would have to resort to different service as we have some services for which we require full control over encryption (on-premise bitwarden, personal data etc.).

septatrix avatar Aug 11 '22 17:08 septatrix