How can I set a different SSL/TLS mode for each CNAME record of a domain ? For example, for one CNAME I would like to have the SSL/TLS mode set to Flexible while for another CNAME I would like to have Full or Full (Strict). Currently it seems that one can only set the SSL/TLS mode for all records. Looking for your feedback.
Try out Page Rules, they have a lot more options than redirecting traffic. Never tried it since i never use CNAMEs, but you should give it a shot:
Page rules seem to do the trick but according to my experience they are just an hack. I have performed many tests and I find page rules slow and buggy. I would like to have a more robust solution.
You could write your own worker to control the connections to your origin instead.