---
title: Origin TLS Compliance Modes
---

[Skip to content](#%5Ftop) 

[API Reference](https://developers.cloudflare.com/api/terraform)

Copy Markdown

Open in **Claude**

Open in **ChatGPT**

Open in **Cursor**

---

**Copy Markdown**

**View as Markdown**

# Origin TLS Compliance Modes

#### resource cloudflare\_origin\_tls\_compliance\_modes

##### required Expand Collapse 

zone\_id: String

Identifier.

value: List\[String\]

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are `fips` (FIPS-approved curves) and `pqh` (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

##### computed Expand Collapse 

id: String

Identifier.

editable: Bool

Whether the setting is editable.

modified\_on: Time

Last time this setting was modified.

### cloudflare\_origin\_tls\_compliance\_modes

Terraform

HTTPHTTP

TypeScriptTypeScript

PythonPython

GoGo

TerraformTerraform

```
resource "cloudflare_origin_tls_compliance_modes" "example_origin_tls_compliance_modes" {
  zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
  value = ["fips", "pqh"]
}

```

#### data cloudflare\_origin\_tls\_compliance\_modes

##### required Expand Collapse 

zone\_id: String

Identifier.

##### computed Expand Collapse 

id: String

Identifier.

editable: Bool

Whether the setting is editable.

modified\_on: Time

Last time this setting was modified.

value: List\[String\]

List of TLS compliance modes that constrain the key-exchange algorithms Cloudflare may use when establishing the TLS connection to the zone’s origin. Currently supported values are `fips` (FIPS-approved curves) and `pqh` (post-quantum hybrid). Future modes (e.g. `cnsa2`) may be added; clients should treat unknown values as opaque strings. Multiple modes are combined as the intersection of their permitted algorithm lists; selections whose intersection is empty are rejected. An empty list clears the constraint.

### cloudflare\_origin\_tls\_compliance\_modes

Terraform

HTTPHTTP

TypeScriptTypeScript

PythonPython

GoGo

TerraformTerraform

```
data "cloudflare_origin_tls_compliance_modes" "example_origin_tls_compliance_modes" {
  zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
}

```