Skip to main content

Enforce TLS Example

With , you can prevent obsolete and potentially vulnerable browsers, SDKs, or CLI tools like curl from attempting to access your API.

This rule:

  1. Uses the conn.tls.version connection variable to check the incoming request's TLS version.
  2. Rejects versions below 1.3 with a 401 Unauthorized response.
Loading…

See the custom-response Traffic Policy action docs for more information.