standardTLSMigration

Property Manager name: Standard TLS Migration
Behavior version: The v2025-04-29 rule format supports the standardTLSMigration behavior v1.0.
Rule format status: GA, stable
Access: Read/Write
Allowed in includes: No (temporarily)

This behavior is deprecated, but you should not disable or remove it if present.

Migrates traffic to Standard TLS. Apply this behavior within the default rule or any hostname match. In some cases you may need to apply this along with the standardTLSMigrationOverride behavior.

Option	Type	Description	Requires
`enabled`	boolean	Allows migration to Standard TLS.		{"displayType":"boolean","tag":"input","type":"checkbox"}
`migrationFrom`	enum	What kind of traffic you're migrating from.		{"displayType":"enum","options":["SHARED_CERT","NON_SECURE","ENHANCED_SECURE"],"tag":"select"} {"if":{"attribute":"enabled","op":"eq","value":true}}
	`SHARED_CERT`	A shared certificate.
	`NON_SECURE`	Non-secure traffic.
	`ENHANCED_SECURE`	Enhanced Secure TLS.
`allowHTTPSUpgrade`	boolean	Allows temporary upgrade of HTTP traffic to HTTPS.	`migrationFrom` is `NON_SECURE`	{"displayType":"boolean","tag":"input","type":"checkbox"} {"if":{"attribute":"migrationFrom","op":"eq","value":"NON_SECURE"}}
`allowHTTPSDowngrade`	boolean	Allow temporary downgrade of HTTPS traffic to HTTP. This removes various `Origin`, `Referer`, `Cookie`, `Cookie2`, `sec-` and `proxy-` headers from the request to origin.	`migrationFrom` is `NON_SECURE`	{"displayType":"boolean","tag":"input","type":"checkbox"} {"if":{"attribute":"migrationFrom","op":"eq","value":"NON_SECURE"}}
`migrationStartTime`	string (epoch timestamp)	Specifies when to start migrating the cache.	`allowHTTPSUpgrade` is `true` OR `allowHTTPSDowngrade` is `true`	{"displayType":"string","tag":"input","type":"text"} {"if":{"op":"or","params":[{"attribute":"allowHTTPSUpgrade","op":"eq","value":true},{"attribute":"allowHTTPSDowngrade","op":"eq","value":true}]}}
`migrationDuration`	number	Specifies the number of days to migrate the cache.	`allowHTTPSUpgrade` is `true` OR `allowHTTPSDowngrade` is `true`	{"displayType":"number","tag":"input","type":"number"} {"if":{"op":"or","params":[{"attribute":"allowHTTPSUpgrade","op":"eq","value":true},{"attribute":"allowHTTPSDowngrade","op":"eq","value":true}]}}
`cacheSharingStartTime`	string (epoch timestamp)	Specifies when to start cache sharing.	`migrationFrom` is `ENHANCED_SECURE`	{"displayType":"string","tag":"input","type":"text"} {"if":{"attribute":"migrationFrom","op":"eq","value":"ENHANCED_SECURE"}}
`cacheSharingDuration`	number	Specifies the number cache sharing days.	`migrationFrom` is `ENHANCED_SECURE`	{"displayType":"number","tag":"input","type":"number"} {"if":{"attribute":"migrationFrom","op":"eq","value":"ENHANCED_SECURE"}}
`isCertificateSNIOnly`	boolean	Sets whether your new certificate is SNI-only.	`migrationFrom` is `ENHANCED_SECURE`	{"displayType":"boolean","tag":"input","type":"checkbox"} {"if":{"attribute":"migrationFrom","op":"eq","value":"ENHANCED_SECURE"}}
`isTieredDistributionUsed`	boolean	Allows you to align traffic to various `tieredDistribution` areas.	`migrationFrom` is `NON_SECURE`	{"displayType":"boolean","tag":"input","type":"checkbox"} {"if":{"attribute":"migrationFrom","op":"eq","value":"NON_SECURE"}}
`tdLocation`	enum	Specifies the `tieredDistribution` location.	`isTieredDistributionUsed` is `true`	{"displayType":"enum","options":["GLOBAL","APAC","EUROPE","US_EAST","US_CENTRAL","US_WEST","AUSTRALIA","GLOBAL_LEGACY"],"tag":"select"} {"if":{"attribute":"isTieredDistributionUsed","op":"eq","value":true}}
	`GLOBAL`	Global.
	`APAC`	Asia and Pacific.
	`EUROPE`	Europe.
	`US_EAST`	Eastern United States.
	`US_CENTRAL`	Central United States.
	`US_WEST`	Western United States.
	`AUSTRALIA`	Australia.
	`GLOBAL_LEGACY`	Global.