Skip to main content

Build HTTPS Only Service

Sometimes you don't want your clients to access the Service over HTTP. Since some security considerations, in such a case, you may want to build an HTTPS-only Service on API7 Cloud.

Configure SSL Object

Follow the tips in How to Create SSL Object and upload the server certificate, private key, CA certificate, API7 Cloud creates an SSL object.


In this guide, we use openssl to generate a self-signed certificate.

openssl req  -x509 -nodes -new  -keyout cloud.key -out cloud.crt -days 3650 -subj "/C=/ST=/L=/O=/OU=web/"

Configure HTTPS Protocol for Service

After you sign in to API7 Cloud, please go ahead according to the following steps:

  1. Go to the Service list page by clicking on the Service button under API Management (in the left sidebar).
  2. Search the target Service that you want to configure HTTPS protocol, clicking on the edit button.
  3. You'll be redirected to the Service edit page, configuring the Protocol field to HTTPS and saving the changes.

In our case, the target Service has the following characteristics:

  1. The host is
  2. The upstream target is
  3. Path prefix is /v1.
  4. There is a JSON route (the endpoint is /v1/json).

Send requests to verify

Since we only enable HTTPS protocol, if we try to access a route in this service, we should get a 301 Moved Permanently response asking us to use HTTPS protocol.

curl -H 'Host:' -i
HTTP/1.1 301 Moved Permanently
Date: Fri, 15 Apr 2022 03:04:23 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
Server: APISIX/2.15.0

<head><title>301 Moved Permanently</title></head>
<center><h1>301 Moved Permanently</h1></center>

As expected, Apache APISIX asks us to access the HTTPS endpoint.

curl --resolve '' -sk
"slideshow": {
"author": "Yours Truly",
"date": "date of publication",
"slides": [
"title": "Wake up to WonderWidgets!",
"type": "all"
"items": [
"Why <em>WonderWidgets</em> are great",
"Who <em>buys</em> WonderWidgets"
"title": "Overview",
"type": "all"
"title": "Sample Slide Show"

We got a successful response when we accessed the HTTPS endpoint.


Since the certificate we use was self-signed, we added the -k option in the above curl command. Logo

API Management for Modern Architectures with Edge, API Gateway, Kubernetes, and Service Mesh.


API7 Cloud

SOC2 Type IRed Herring

Copyright © APISEVEN Ltd. 2019 – 2024. Apache, Apache APISIX, APISIX, and associated open source project names are trademarks of the

Apache Software Foundation