Skip to content
Merged
Show file tree
Hide file tree
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,7 @@ This guide will use the first example and consider a prefix that was onboarded t

<Render
file="service-bindings-prereqs"
product="byoip"
params={{
pre_existing_product: "CDN",
added_product: "Spectrum",
Expand All @@ -42,6 +43,7 @@ This guide will use the first example and consider a prefix that was onboarded t

<Render
file="service-bindings-account-info"
product="byoip"
params={{
pre_existing_product: "CDN",
added_product: "Spectrum",
Expand All @@ -52,6 +54,7 @@ This guide will use the first example and consider a prefix that was onboarded t

<Render
file="service-bindings-create-binding"
product="byoip"
params={{
pre_existing_product: "CDN",
added_product: "Spectrum",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,7 @@ It is important to note that traffic routed to the CDN pipeline is protected at

<Render
file="service-bindings-prereqs"
product="byoip"
params={{
pre_existing_product: "Magic Transit",
added_product: "CDN",
Expand All @@ -36,6 +37,7 @@ It is important to note that traffic routed to the CDN pipeline is protected at

<Render
file="service-bindings-account-info"
product="byoip"
params={{
pre_existing_product: "Magic Transit",
added_product: "CDN",
Expand All @@ -46,6 +48,7 @@ It is important to note that traffic routed to the CDN pipeline is protected at

<Render
file="service-bindings-create-binding"
product="byoip"
params={{
pre_existing_product: "Magic Transit",
added_product: "CDN",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,12 +9,17 @@ description: Learn how to configure your Enterprise zone with BigCommerce.

import { Render } from "~/components";

<Render file="provider-guide-intro" params={{ providerName: "BigCommerce" }} />
<Render
file="provider-guide-intro"
params={{ providerName: "BigCommerce" }}
product="cloudflare-for-platforms"
/>

## Benefits

<Render
file="provider-guide-benefits"
product="cloudflare-for-platforms"
params={{ providerName: "BigCommerce" }}
/>

Expand Down Expand Up @@ -49,4 +54,8 @@ If you cannot activate your domain using [proxied DNS records](/dns/proxy-status

## Additional support

<Render file="provider-guide-help" params={{ providerName: "BigCommerce" }} />
<Render
file="provider-guide-help"
params={{ providerName: "BigCommerce" }}
product="cloudflare-for-platforms"
/>
Original file line number Diff line number Diff line change
Expand Up @@ -9,11 +9,19 @@ description: Learn how to configure your zone with HubSpot.

import { Render } from "~/components";

<Render file="provider-guide-intro" params={{ providerName: "HubSpot" }} />
<Render
file="provider-guide-intro"
params={{ providerName: "HubSpot" }}
product="cloudflare-for-platforms"
/>

## Benefits

<Render file="provider-guide-benefits" params={{ providerName: "HubSpot" }} />
<Render
file="provider-guide-benefits"
params={{ providerName: "HubSpot" }}
product="cloudflare-for-platforms"
/>

## How it works

Expand Down Expand Up @@ -50,4 +58,8 @@ Once the zone hold is temporarily disabled, follow HubSpot's instructions to ref

## Additional support

<Render file="provider-guide-help" params={{ providerName: "HubSpot" }} />
<Render
file="provider-guide-help"
params={{ providerName: "HubSpot" }}
product="cloudflare-for-platforms"
/>
Original file line number Diff line number Diff line change
Expand Up @@ -9,11 +9,19 @@ description: Learn how to configure your Enterprise zone with Kinsta.

import { Render } from "~/components";

<Render file="provider-guide-intro" params={{ providerName: "Kinsta" }} />
<Render
file="provider-guide-intro"
params={{ providerName: "Kinsta" }}
product="cloudflare-for-platforms"
/>

## Benefits

<Render file="provider-guide-benefits" params={{ providerName: "Kinsta" }} />
<Render
file="provider-guide-benefits"
params={{ providerName: "Kinsta" }}
product="cloudflare-for-platforms"
/>

## How it works

Expand All @@ -38,7 +46,11 @@ To enable O2O for a specific hostname within a Cloudflare zone, [create](/dns/ma

## Additional support

<Render file="provider-guide-help" params={{ providerName: "Kinsta" }} />
<Render
file="provider-guide-help"
params={{ providerName: "Kinsta" }}
product="cloudflare-for-platforms"
/>

### Resolving SSL errors using Cloudflare Managed Certificates

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ import { Render } from "~/components";

<Render
file="provider-guide-intro"
product="cloudflare-for-platforms"
params={{
providerName: "Render",
providerUrl: "https://render.com",
Expand All @@ -22,6 +23,7 @@ import { Render } from "~/components";

<Render
file="provider-guide-benefits"
product="cloudflare-for-platforms"
params={{ providerName: "Render", providerAssets: "services" }}
/>

Expand Down Expand Up @@ -62,7 +64,11 @@ If your root domain needs to route somewhere besides Render, add individual subd

## Additional support

<Render file="provider-guide-help" params={{ providerName: "Render" }} />
<Render
file="provider-guide-help"
params={{ providerName: "Render" }}
product="cloudflare-for-platforms"
/>

### Resolving SSL errors

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,13 +11,15 @@ import { Details, Render } from "~/components";

<Render
file="provider-guide-intro"
product="cloudflare-for-platforms"
params={{ providerName: "Salesforce Commerce Cloud" }}
/>

## Benefits

<Render
file="provider-guide-benefits"
product="cloudflare-for-platforms"
params={{ providerName: "Salesforce Commerce Cloud" }}
/>

Expand Down Expand Up @@ -81,6 +83,7 @@ And, the following is an **incorrect** configuration because `preview.example.co

<Render
file="provider-guide-help"
product="cloudflare-for-platforms"
params={{ providerName: "Salesforce Commerce Cloud" }}
/>

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,11 @@ description: Learn how to configure your zone with Shopify.

import { Render } from "~/components";

<Render file="provider-guide-intro" params={{ providerName: "Shopify" }} />
<Render
file="provider-guide-intro"
params={{ providerName: "Shopify" }}
product="cloudflare-for-platforms"
/>

## Benefits

Expand Down Expand Up @@ -54,7 +58,11 @@ If you cannot activate your domain using [proxied DNS records](/dns/proxy-status

## Additional support

<Render file="provider-guide-help" params={{ providerName: "Shopify" }} />
<Render
file="provider-guide-help"
params={{ providerName: "Shopify" }}
product="cloudflare-for-platforms"
/>

### DNS CAA records

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -9,11 +9,19 @@ description: Learn how to configure your zone with WP Engine.

import { Render } from "~/components";

<Render file="provider-guide-intro" params={{ providerName: "WP Engine" }} />
<Render
file="provider-guide-intro"
params={{ providerName: "WP Engine" }}
product="cloudflare-for-platforms"
/>

## Benefits

<Render file="provider-guide-benefits" params={{ providerName: "WP Engine" }} />
<Render
file="provider-guide-benefits"
params={{ providerName: "WP Engine" }}
product="cloudflare-for-platforms"
/>

## How it works

Expand Down Expand Up @@ -54,7 +62,11 @@ Once the zone hold is temporarily disabled, follow WP Engine's instructions to r

## Additional support

<Render file="provider-guide-help" params={{ providerName: "WP Engine" }} />
<Render
file="provider-guide-help"
params={{ providerName: "WP Engine" }}
product="cloudflare-for-platforms"
/>

### Resolving SSL errors

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -6,18 +6,16 @@ sidebar:
head:
- tag: title
content: TLS Settings — Cloudflare for SaaS

---

import { AvailableNotifications, Details, Render } from "~/components"
import { AvailableNotifications, Details, Render } from "~/components";

[Mutual TLS (mTLS)](https://www.cloudflare.com/learning/access-management/what-is-mutual-tls/) adds an extra layer of protection to application connections by validating certificates on the server and the client. When building a SaaS application, you may want to enforce mTLS to protect sensitive endpoints related to payment processing, database updates, and more.

[Minimum TLS Version](/ssl/edge-certificates/additional-options/minimum-tls/) allows you to choose a cryptographic standard per custom hostname. Cloudflare recommends TLS 1.2 to comply with the Payment Card Industry (PCI) Security Standards Council.

[Cipher suites](/ssl/edge-certificates/additional-options/cipher-suites/) are a combination of ciphers used to negotiate security settings during the [SSL/TLS handshake](https://www.cloudflare.com/learning/ssl/what-happens-in-a-tls-handshake/). As a SaaS provider, you can [specify configurations for cipher suites](#cipher-suites) on your zone as a whole and cipher suites on individual custom hostnames via the API.


:::caution
When you [issue a custom hostname certificate](/cloudflare-for-platforms/cloudflare-for-saas/security/certificate-management/issue-and-validate/) with wildcards enabled, any cipher suites or Minimum TLS settings applied to that hostname will only apply to the direct hostname.

Expand All @@ -30,10 +28,8 @@ Once you have [added a custom hostname](/cloudflare-for-platforms/cloudflare-for

:::note


Currently, you cannot add mTLS policies for custom hostnames using [API Shield](/api-shield/security/mtls/).


:::

## Enable Minimum TLS Version
Expand All @@ -55,27 +51,31 @@ While TLS 1.3 is the most recent and secure version, it is not supported by some

For security and regulatory reasons, you may want to only allow connections from certain cipher suites. Cloudflare provides recommended values and full cipher suite reference in our [Cipher suites documentation](/ssl/edge-certificates/additional-options/cipher-suites/#resources).


<Details header="Restrict cipher suites for your zone">

Refer to [Customize cipher suites - SSL/TLS](/ssl/edge-certificates/additional-options/cipher-suites/customize-cipher-suites/).

</Details>


<Details header="Restrict cipher suites for custom hostname">

In the API documentation, refer to [SSL properties of a custom hostname](/api/resources/custom_hostnames/methods/edit/).

<Render file="edit-custom-hostname-api" params={{ one: "When making the request," }} />

<Render
file="edit-custom-hostname-api"
params={{ one: "When making the request," }}
product="cloudflare-for-platforms"
/>

</Details>

## Alerts for mutual TLS certificates

You can configure alerts to receive notifications before your mutual TLS certificates expire.

<AvailableNotifications product="SSL/TLS" notificationFilter="Access mTLS Certificate Expiration Alert" />
<AvailableNotifications
product="SSL/TLS"
notificationFilter="Access mTLS Certificate Expiration Alert"
/>

<Render file="get-started" product="notifications" />
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,7 @@ To set up Cloudflare for SaaS for [apex proxying](/cloudflare-for-platforms/clou

<Render
file="get-started-prereqs"
product="cloudflare-for-platforms"
params={{
one: "(this should be within the account associated with your IP prefixes).",
}}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,11 @@ import { Example, Render } from "~/components";

---

<Render file="get-started-prereqs" params={{ one: "on a Free plan." }} />
<Render
file="get-started-prereqs"
params={{ one: "on a Free plan." }}
product="cloudflare-for-platforms"
/>

---

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7,11 +7,12 @@ rss: file
import { Render } from "~/components";

<Render
file="casb/integration-description"
params={{
integrationName: "Atlassian Confluence",
integrationAccountType: "Atlassian Confluence Cloud account",
}}
file="casb/integration-description"
product="cloudflare-one"
params={{
integrationName: "Atlassian Confluence",
integrationAccountType: "Atlassian Confluence Cloud account",
}}
/>

:::note
Expand Down Expand Up @@ -42,8 +43,12 @@ These permissions follow the principle of least privilege to ensure that only th
## Security findings

<Render
file="casb/security-findings"
params={{ integrationName: "Atlassian Confluence", slugRelativePath: "atlassian-confluence" }}
file="casb/security-findings"
product="cloudflare-one"
params={{
integrationName: "Atlassian Confluence",
slugRelativePath: "atlassian-confluence",
}}
/>

### Access security
Expand Down
Loading