Enabled Cloudflare today, redirect issues on multiple applications

So I run a series of webapps on e.g abc.example.com, def.example.com, and so on. One such application is working fine, but the rest are all giving too many redirect errors. The URL at each hop of the redirect is identical, so I'm not really sure what's going on. Logs as follows
--2024-11-25 16:40:33-- https://redacted_url/
Resolving redacted_url (redacted_url)... presumably cloudflare ip addresses
Connecting to redacted_url (redacted_url)|maybe another cloudflare ip address|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://redacted_url/ [following]
--2024-11-25 16:40:33-- https://redacted_url/
Reusing existing connection to redacted_url
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://redacted_url/ [following]
--2024-11-25 16:40:33-- https://redacted_url/
Reusing existing connection to redacted_url
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://redacted_url/ [following]
--2024-11-25 16:40:33-- https://redacted_url/
Resolving redacted_url (redacted_url)... presumably cloudflare ip addresses
Connecting to redacted_url (redacted_url)|maybe another cloudflare ip address|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://redacted_url/ [following]
--2024-11-25 16:40:33-- https://redacted_url/
Reusing existing connection to redacted_url
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://redacted_url/ [following]
--2024-11-25 16:40:33-- https://redacted_url/
Reusing existing connection to redacted_url
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://redacted_url/ [following]
Is there something obvious that I've forgotten to do? I've not specifically added DNS rules for each of the subdomains, only the main domain. I've retroactively added them incase it mattered, but no dice yet (pending DNS propagation, though), and they all point to the same IP which does its own sorting in an RP. Apologies if DNS is the wrong tag for this, pretty new here.
3 Replies
Chaika
Chaika4mo ago
SSL/TLS -> Overview, make sure you're on Full Strict or Strict SSL, otherwise Click Configure and select custom -> Full (Strict) Magic Link: https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls/configuration
Josh
JoshOP4mo ago
In before you shared the magic link, thanks! I'm guessing since this is config it should be a broadly instant fix? Just worked off the bat, nice. Thank you! 🍻
Chaika
Chaika4mo ago
Config replicates pretty quickly yea. CF has some default scanner for ssl type but it doesn't always work, it was trying to send HTTP (plaintext) requests to your origin over and over on Flexible which your origin was redirecting, Full (Strict) is https to origin/verify cert just like a browser would

Did you find this page helpful?