Introduction

Cloudflare redirect loops usually happen when more than one layer tries to enforce URL behavior at the same time. A Page Rule may force HTTPS while the origin performs its own redirect, or one hostname pattern may match traffic that another rule already rewrites. The fastest fix is to map every redirect decision between browser, Cloudflare, and origin before removing rules blindly.

Symptoms

  • Browsers report too many redirects only when traffic passes through Cloudflare
  • The loop began after adding or editing a Page Rule, redirect rule, or SSL setting
  • One hostname loops while another version of the same site loads normally
  • Direct origin access works, but the proxied hostname bounces endlessly
  • Login pages, checkout paths, or specific URL patterns fail more often than others

Common Causes

  • Multiple Page Rules or redirect features apply conflicting URL rewrites
  • Cloudflare SSL mode conflicts with HTTPS redirects at the origin
  • Hostname normalization rules for www and apex domains fight each other
  • Cached redirect responses preserve old behavior after a rule change
  • The origin assumes one host or protocol while Cloudflare presents another

Step-by-Step Fix

  1. Reproduce the loop and record the exact redirect chain, including hostname and protocol changes at each hop.
  2. Review all Cloudflare Page Rules, redirect rules, and bulk redirects that could match the failing URL pattern.
  3. Compare Cloudflare SSL mode with origin redirect behavior so HTTPS enforcement happens in one consistent place.
  4. Check whether both www and apex hostnames have overlapping normalization rules that point traffic back and forth.
  5. Test the origin directly to confirm whether it performs its own redirects without Cloudflare in the path.
  6. Purge redirect-related cache after changing rules so old responses do not make the loop appear unresolved.
  7. Narrow rule scope where possible so redirects apply only to the intended host and path set.
  8. Retest login, admin, and deep-link paths, not just the homepage, because loops often affect only selected patterns.
  9. Keep one documented redirect source of truth so future Cloudflare and origin changes do not reintroduce circular behavior.