SSL and network settings for Cloudflare Workers static site

Hi, I set up a Hugo static blog served with Cloudflare Workers Sites (unlimited plan, with a KV storage). I used this walk-through as a guide, the process was pretty easy and smooth to follow. And I am very happy with the result and the performance.

As advised, I used dummy IPs for my DNS A/AAAA settings ( and 2001:db8:ffff:ffff:ffff:ffff:ffff:ffff).

Since my origin is not a server but a Cloudflare KV storage, what are the good practices regarding these domain settings?

  • SSL: I am currently set on Full (strict) value. Is that OK?
  • WebSockets: it is toggle on. Should I keep, or toggle off?
  • Are there any settings I should be careful of? (I am currently on free plan)

Thank you in advance for your recommendations!

Generally, it should always be “Full strict” and “Full strict” only. In your case (with Worker Sites) however it does not really matter as there’ll never be a connection to an origin where that setting would matter. You should only avoid “Off” as that would disable SSL altogether. Should you ever have a connection to an origin, it should be “Full strict” as that is the only really secure mode.

Again, in a Worker Sites context irrelevant.

1 Like

Thank you a lot for the feedback! This is what I thought but I wanted to be sure.