Cloudflare Docs
Cloudflare for Platforms
Cloudflare for Platforms
Edit this page on GitHub
Set theme to dark (⇧+D)

Shopify

Cloudflare partners with Shopify to provide Shopify customers’ websites with Cloudflare’s performance and security benefits.

If you use Shopify and also have a Cloudflare Enterprise plan, you can use your own Cloudflare Zone to proxy web traffic to your Zone first, then Shopify’s (the SaaS Provider) Zone second. This configuration option is called Orange-to-Orange (O2O).

​​ Benefits

O2O routing also enables you to take advantage of Cloudflare zones specifically customized for Shopify traffic.

​​ How it works

For more details about how O2O is different than other Cloudflare setups, refer to How O2O works.

​​ Enable

You can only enable O2O on the Cloudflare Enterprise plan.

To enable O2O on your account, create a CNAME DNS record.

TypeNameTargetProxy status
CNAME<YOUR_SHOP_DOMAIN>shops.myshopify.comProxied

​​ Product compatibility

When a hostname within your Cloudflare Zone has O2O enabled, you assume additional responsibility for the traffic on that hostname because you can now configure various Cloudflare products to affect that traffic. Some of the Cloudflare products compatible with O2O are:

For a full list of compatible products and potential limitations, refer to Product compatibility.

​​ Additional support

If you are a Shopify customer and have set up your own Cloudflare Zone with O2O enabled on specific hostnames, contact your Cloudflare Account Team or Cloudflare Support for help resolving issues in your own Zone.

Cloudflare will turn to Shopify if there are technical issues that Cloudflare cannot resolve.

​​ DNS CAA records

Shopify issues SSL/TLS certificates for merchant domains using Let’s Encrypt. If you add any DNS CAA records, you must select Let’s Encrypt as the Certificate Authority (CA) or HTTPS connections may fail.

For more details, refer to CAA records.