All my subdomains are redirecting to https when proxied through Cloudflare, and I don't know why. And yes, "Always Use HTTPS" is disabled :)

[jdscheff]

I’ve been using Cloudflare on zengm.com for years.

It seems that at some point, all of my proxied subdomains started redirecting to https URLs. This is a problem because I use IndexedDB, and data is not accessible across http and https, so a redirect without carefully migrating user data is a big problem.

I’m not sure when exactly this started happening, but it definitely did not used to happen like a year ago. These http only subdomains are all legacy products, so it’s possible they have been broken for months without me noticing!

Anyway, here’s an example. Both http://baseball.zengm.com and http://baseballseasons.zengm.com were redirecting to https, producing an error message since I don’t have SSL certs for those subdomains. But if I disable Cloudflare proxying for a subdomain, then it starts working. I did that for baseball so now that works. No https redirect. baseballseasons is still proxied through Cloudflare and is still broken due to the https redirect.

(Sorry it is not letting me make this post with links, so I just wrote the subdomains rather than linking to them!)

Looking at my Cloudflare settings, at SSL/TLS > Edge Certificates, the “Always Use HTTPS” setting disabled. I’m not sure what other setting is responsible for the automatic redirects I’m observing, so here’s what they all look like, if that is useful for debugging:

Any ideas about what might be going wrong?

[fritex]

Greetings,

Thank you for asking.

May I ask what SSL option have you got selected under the SSL/TLS tab at Cloudflare dashboard for your domain ( Flexible, Full, Full Strict … )?

[jdscheff]

The SSL/TLS mode is currently “Full”. The redirect seems to still happen even if I change it to “Flexible” or “Full (strict)” - it just has a different error message in those cases, but the same fundamental problem (redirecting to https) happens for all of them.