Skip to content
Cloudflare Docs
The default global Cloudflare root certificate expired on 2025-02-02. If you installed the default Cloudflare certificate before 2024-10-17, you must generate a new certificate and activate it for your Zero Trust organization to avoid inspection errors.

WebSocket traffic

Gateway does not inspect or log WebSocket ↗ traffic. Instead, Gateway will only log the HTTP details used to make the WebSocket connection, as well as network session information. To filter your WebSocket traffic, create a policy with the 101 HTTP response code.

SelectorOperatorValueAction
HTTP Responseis101 SWITCHING_PROTOCOLSAllow