Enforce TLS Example

With Traffic Policy, you can prevent obsolete and potentially vulnerable browsers, SDKs, or CLI tools like curl from attempting to access your API.

This rule:

1. Uses the conn.tls.version connection variable to check the incoming request's TLS version.
2. Rejects versions below 1.3 with a 401 Unauthorized response.

You can use one of the following snippets:

Policy

YAML

Loading…

JSON

Loading…

Agent Config

YAML

Loading…

JSON

Loading…

See the custom-response Traffic Policy action docs for more information.