# Issues with Reverse Proxy Validation Checks when Using Cloudflare → HubSpot Setup **URL:** \ **Category:** CMS Development\ **Tags:** enterprise\ **Created:** [September 18, 2025, 8:23am UTC](https://community.hubspot.com/t/issues-with-reverse-proxy-validation-checks-when-using-cloudflare-hubspot-setup/139712 "2025-09-18T08:23:28Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![deguchi](https://avatars.discourse-cdn.com/v4/letter/d/9d8465/32.png) [@deguchi](https://community.hubspot.com/u/deguchi)\ **Post date:** [September 18, 2025, 8:23am UTC](https://community.hubspot.com/t/issues-with-reverse-proxy-validation-checks-when-using-cloudflare-hubspot-setup/139712/1 "2025-09-18T08:23:28Z")
Hello, I have set up my own Cloudflare account and am trying to use HubSpot’s reverse proxy in the following configuration: **Cloudflare → HubSpot** The connection to HubSpot content itself is working, but when I run the “Reverse Proxy Connection Validation,” six of the checks fail. Here are the results: - **DCV** : Passed - **File HubF** : Failed ([https://example.com/hubfs/hs-reverse-proxy-validation-test](https://example.com/hubfs/hs-reverse-proxy-validation-test)) - **File hs-fs** : Failed ([https://example.com/hs-fs/hs-reverse-proxy-validation-test](https://example.com/hs-fs/hs-reverse-proxy-validation-test)) - **Static assets** : Failed ([https://example.com/hs/hs-reverse-proxy-validation-test](https://example.com/hs/hs-reverse-proxy-validation-test)) - **Script loader** : Passed ([http://example.com/hs/scriptloader/\[portal-id\].js](http://example.com/hs/scriptloader/%5C%5Bportal-id%5C%5D.js)) - **CTA links** : Failed ([https://example.com/cs/c/hs-reverse-proxy-validation-test](https://example.com/cs/c/hs-reverse-proxy-validation-test)) - **Event tracking link** : Failed ([https://example.com/e3t/hs-reverse-proxy-validation-test](https://example.com/e3t/hs-reverse-proxy-validation-test)) - **CMS page status** : Passed ([http://example.com/\_hcms/status](http://example.com/%5C_hcms/status)) - **CMS page diagnostics** : Passed ([http://example.com/\_hcms/diagnostics](http://example.com/%5C_hcms/diagnostics)) - **CMS page edge** : Failed ([https://example.com/\_hcms/\_worker/headers](https://example.com/%5C_hcms/%5C_worker/headers)) When I check the response at / \_hcms/\_worker/headers, I can confirm that both **x-hs-public-host** and **x-hubspot-trust-forwarded-for** are set correctly, and there are no duplicate values in **x-forwarded-for**. Here is an excerpt from the headers (masked): `x-hs-public-host: "example.com" x-hubspot-trust-forwarded-for: "true" x-forwarded-for: "[masked-ip]" x-forwarded-proto: "https" x-real-ip: "[masked-ip]" ...` To rule out Cloudflare dependency, I also tested with **Route53 + CloudFront → HubSpot** , but I observed the same six failed checks. Has anyone experienced similar issues, or is there any additional configuration required on the HubSpot side to make these validation checks pass? Thank you in advance for your support. ---
**Author:** ![chighsmith](https://avatars.discourse-cdn.com/v4/letter/c/77aa72/32.png) [@chighsmith](https://community.hubspot.com/u/chighsmith)\ **Post date:** [September 18, 2025, 2:17pm UTC](https://community.hubspot.com/t/issues-with-reverse-proxy-validation-checks-when-using-cloudflare-hubspot-setup/139712/2 "2025-09-18T14:17:24Z")
Hi @deguchi, Thank you for posting to the Community! I’d like to tag in some of our Top Contributors to see if they have any ideas on this one 🙂 Hi @Bryantworks @LMeert [@Jonas\_De\_Mets](https://community.hubspot.com/t5/user/viewprofilepage/user-id/654259) I hope you are having a wonderful day! Do any of you all have any experience with setting up a reverse proxys from Cloudflare to Hubspot? Thank you! Cassie, Community Manager ---
**Author:** ![suprdense](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/suprdense/32/6496_2.png) [@suprdense](https://community.hubspot.com/u/suprdense)\ **Post date:** [September 23, 2025, 2:15pm UTC](https://community.hubspot.com/t/issues-with-reverse-proxy-validation-checks-when-using-cloudflare-hubspot-setup/139712/3 "2025-09-23T14:15:56Z")
Hey Deguchi, The failed checks aren’t caused by anything inside your HubSpot account, they come from the proxy layer (Cloudflare or CloudFront) altering HubSpot’s special asset paths. HubSpot’s validator looks for specific test files under those paths, and if the proxy rewrites, caches, blocks them, the test fails. To resolve this, your proxy must allow transparent pass-through of HubSpot’s asset directories. The key requirement is that these routes reach HubSpot exactly as requested, without caching, redirects, minification, or URL normalization applied. On Cloudflare, that means: -Configure rules so that those asset routes bypass cache completely. -Turn off performance features like Auto Minify, Rocket Loader, and URL Normalization for them. -Ensure SSL/TLS mode is set to “Full” or “Full (Strict)” so HubSpot sees unmodified HTTPS traffic. After making these changes, check the failing URLs directly in a browser or with a simple header inspection. They should return a valid HubSpot response, including HubSpot-specific headers. If they still return errors, it means the proxy is not passing those routes correctly and needs adjustment. Once the proxy is fully transparent for those paths, rerun HubSpot’s reverse proxy validation. The failures should clear. If they persist even with Cloudflare bypassed, the issue is in the reverse proxy rules themselves every required namespace must be proxied unaltered for validation to succeed. I hope this helps clarify things and gives you the context you needed. If it resolves your question, please mark it as the accepted solution and give it an upvote so it can also support other members of the community. ---
**Author:** ![deguchi](https://avatars.discourse-cdn.com/v4/letter/d/9d8465/32.png) [@deguchi](https://community.hubspot.com/u/deguchi)\ **Post date:** [September 25, 2025, 5:50am UTC](https://community.hubspot.com/t/issues-with-reverse-proxy-validation-checks-when-using-cloudflare-hubspot-setup/139712/4 "2025-09-25T05:50:35Z")
Hi Abhi, Thank you very much for the detailed explanation. I went through the steps you suggested and applied the following settings on Cloudflare: - Auto Minify has already been deprecated on Cloudflare, so no action was required. - Rocket Loader is turned OFF (it was already disabled). - A Cache Rule was added to bypass cache for all incoming requests. - SSL/TLS mode is set to **Full (Strict)**. - URL Normalization has been disabled for both incoming requests and traffic to the origin. After making these adjustments, I re-ran the reverse proxy validation. Unfortunately, the same checks are still failing with no change in the results. Do you have any further recommendations on what else I should check in Cloudflare, or adjustments that might be needed on the reverse proxy configuration itself? Thanks again for your help and guidance! ---
**Author:** ![sarvani24](https://avatars.discourse-cdn.com/v4/letter/s/ecccb3/32.png) [@sarvani24](https://community.hubspot.com/u/sarvani24)\ **Post date:** [November 14, 2025, 7:22pm UTC](https://community.hubspot.com/t/issues-with-reverse-proxy-validation-checks-when-using-cloudflare-hubspot-setup/139712/5 "2025-11-14T19:22:51Z")
I am seeing the exact same checks failed while setting up CloudFront reverse proxy to HubSpot. I started a new discussion in here with more details: [https://community.hubspot.com/t5/APIs-Integrations/CloudFront-Reverse-proxy-verification/m-p/1224062#M85509](https://community.hubspot.com/t5/APIs-Integrations/CloudFront-Reverse-proxy-verification/m-p/1224062#M85509). Please let me know anyone fixed this issue. Thank you.