Infinite Redirect Loop caused by Proxy (AWS Backend)

Website, Application, Performance DNS & Network
1

With our website backend hosted on AWS, and the endpoint distribution managed with Cloudfront, we are experiencing a redirect loop when applying Proxy, needed for the Page Rules. As soon the subdomain is set to Proxy via Cloudflare, the redirect loop start happening regardless of whether the Page Rule is active or not. Please Help.

  • Cloudflare subdomain pointing to AWS CloudFront distribution
  • domain linked to the s3 via AWS CloudFront
  • backend hosted on AWS s3
  • AWS CloudFront distribution has AWS HTTPS Certificate issued for the subdomain (validated via CNAME)
4

Can you please head over to https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls and check your current SSL/TLS encryption mode?

If it is currently set to Flexible, then switch to Full (Strict).

3 Likes
5

Thank you, while this may seem as a solution, because of the differences in the backends we can’t go with FULL Strict because some of the services we use won’t have the required encryption between Cloudflare and the server. E.g. applying strict will fix this problem but will create other

6

Full strict does not require encryption. You can still reach your unencrypted services with the same HTTP requests you used before adding the site to Cloudflare.

For obvious reasons, you will have to disable “Always Use HTTPS” for these services.

If you really want to use Flexible, you’ll instead have to fix your services that require encryption (and thus cause the redirect loop).

1 Like
7

As @Laudian wrote, you dont need SSL with Strict but you need Strict to have the secured services be secured. Otherwise you still have no proper encryption.

2 Likes
8

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.