Recommended Free Tools
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
To make https://example.com the canonical address, route both example.com and www.example.com to the same redirect-capable layer, install a certificate that covers every HTTPS hostname users can request, and create one permanent rule from https://www.example.com/* to https://example.com/$1. Preserve the query string. Enforce HTTP-to-HTTPS separately, and make sure only one layer owns each redirect.
Most failures come from one of four causes: the hostname bypasses the service containing the rule, the certificate does not cover the requested name, an origin cannot tell that a proxy already used HTTPS, or competing rules send the browser back and forth.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWhat “without WWW” actually requires
There are two independent decisions in a redirect setup:
- Transport security: HTTP requests should end at HTTPS.
- Hostname canonicalization: the HTTPS
wwwhostname should end at the HTTPS apex (also called non-www) hostname.
For this article, the intended final address is https://example.com. A request for any of these addresses should converge there while retaining its path and query string:
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application:Upgraded attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Warranty & Support: Our Electric air duster comes with 5 years warranty and 24/7 customer service. During this period, if you have any questions,pls kindly feel free to contact us.
| Request | Expected result | Purpose |
|---|---|---|
http://example.com/docs?a=1 |
Redirect to an HTTPS URL, ultimately https://example.com/docs?a=1 |
HTTP-to-HTTPS enforcement |
http://www.example.com/docs?a=1 |
Redirect to https://example.com/docs?a=1 |
Both canonicalization and HTTPS |
https://www.example.com/docs?a=1 |
Redirect to https://example.com/docs?a=1 |
HTTPS hostname canonicalization |
https://example.com/docs?a=1 |
Serve the page without another redirect | Canonical destination |
Do not configure a rule that sends the apex to www at the same time. Cloudflare documents separate patterns for each direction; enabling both creates a loop or an unnecessary chain.
Choose one redirect owner before changing settings
A redirect can be generated by an edge network, a load balancer, a reverse proxy, a web server, or the application itself. Decide which layer should perform each job. A simple arrangement is:
- Edge: redirect
wwwto the apex and, if desired, redirect HTTP to HTTPS. - Origin: serve the final HTTPS apex request without redirecting it again.
- Application: generate absolute URLs using the original HTTPS scheme and canonical host.
Other arrangements can work, but every extra redirect owner increases the chance of conflicting conditions. Cloudflare’s “Always Use HTTPS” documentation, updated August 14, 2026, states: “Cloudflare recommends not performing redirects at your origin web server, as this can cause redirect loop errors.” If the edge owns the redirect, remove duplicate origin rules or make them conditional so they do not repeat the edge’s decision.
Write down the intended policy
Before editing anything, record these values:
- Canonical host:
example.com - Canonical scheme:
https - Non-canonical host:
www.example.com - Redirect status while testing: temporary (for example, 302)
- Redirect status after validation: permanent (301)
- Path handling: preserve the complete path
- Query handling: preserve the original query string
Make DNS and proxy routing reach the rule
A redirect rule cannot run for traffic that never reaches the service where the rule is configured. Ensure both hostnames resolve to that service. Check the apex record, the www record, any load-balancer listener, and any alternate IPv6 record. A stale www record pointing directly to the origin can bypass an edge rule that works for the apex.
Proxied and DNS-only hostnames
With a proxied hostname, the edge receives the request and can apply its redirect and edge certificate. With a DNS-only hostname, the request goes directly to the origin; the origin must then provide the certificate and redirect. Cloudflare notes that an alias-domain redirect can run at Cloudflare without a separate origin, but the DNS record still has to reach Cloudflare.
Use the same routing model for both names unless you have a deliberate reason not to. Mixed routing is a common explanation for the symptom “the apex redirects correctly, but www does not.”
Verify each hostname independently
Resolve both names from more than one network when possible. A local cache, split-horizon DNS, or an old record can hide the actual problem. The important question is not merely whether DNS returns an address; it is whether that address belongs to the layer that owns the redirect.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Provide certificate coverage for every HTTPS request
The browser completes TLS before it can receive an HTTPS redirect. Therefore, a certificate error cannot be repaired by a redirect rule that the browser never reaches.
The edge or origin that terminates TLS must have a certificate valid for each hostname users may request:
example.comwww.example.com
For proxied hostnames, the edge certificate covers the client-to-edge connection; the edge then makes a separate connection to the origin. For DNS-only hostnames, the origin must support TLS for the requested name itself. Check the certificate presented on both paths if some records are proxied and others are not.
Certificate symptoms
- A browser reports that the certificate name does not match before any redirect appears.
https://www.example.comfails whilehttps://example.comworks.- A load balancer presents a default certificate because the hostname is not attached to the correct listener.
Fix certificate coverage first. Do not test redirect logic through a browser that is already blocking the connection for a certificate error.
Create one HTTPS www-to-apex rule
For a non-www canonical site, the rule should match the HTTPS www hostname, retain the path, and return a 301 to the HTTPS apex. Cloudflare’s documented pattern is:
| Setting | Value |
|---|---|
| Match | https://www.example.com/* (or the dashboard’s equivalent wildcard host pattern) |
| Target | https://example.com/$1 |
| Status | 301 after testing; use a temporary status while changing the rule |
| Query string | Preserve enabled |
Cloudflare also shows the generalized form https://www.* to https://${1}. Replace the wildcard with your actual host and make sure the path capture is retained. Do not enable the reverse rule from https://example.com/* to https://www.example.com/${1} at the same time.
Why path and query preservation matters
A hostname-only migration should not turn /products/item-7?ref=email into / or discard ref=email. Losing the path can break bookmarks and internal links; losing the query can break campaign tracking, filters, or application state. Verify both components in the Location header rather than assuming the dashboard preserved them.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Enforce HTTP-to-HTTPS without creating a loop
After hostname canonicalization is correct, enforce HTTPS for all supported paths. An edge “Always Use HTTPS” setting can perform this before the request reaches the origin. Cloudflare says an active edge certificate is required and recommends checking both dashboard and origin redirects when diagnosing loops.
If the origin also redirects every HTTP request, two layers may still coexist safely when the edge sends only genuinely HTTP requests to the origin. In practice, duplicate unconditional rules are difficult to reason about. Give one layer ownership and remove the other, or make the origin rule aware of the proxy’s original scheme.
Understand TLS termination
A reverse proxy or load balancer may terminate TLS at the edge and forward plain HTTP to the origin. From the user’s perspective the request is HTTPS; from the origin socket’s perspective it is HTTP. Apache documents that %{HTTPS} can remain off when SSL/TLS was terminated upstream. An application that trusts only that local flag may issue an HTTP-to-HTTPS redirect on every request, including requests that were already HTTPS at the edge.
Pass the original scheme in the proxy’s forwarded headers and configure the application or framework to trust that proxy. Apply this only to known proxy addresses; blindly trusting client-supplied scheme headers lets a client spoof the value.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Step-by-step troubleshooting sequence
1. Confirm the canonical direction
Decide that the apex is canonical and search all configuration layers for rules pointing the other way. Remove old “force www” rules from a CMS, web server, load balancer, edge dashboard, and redirect plugin. A rule that sends the apex to www conflicts with the intended result even if the new edge rule is correct.
2. Check DNS and routing
Verify that example.com and www.example.com both reach the redirect owner. Check A, AAAA, CNAME, and any provider-specific alias records. If one hostname is DNS-only, inspect the origin configuration instead of the edge dashboard.
3. Check certificate names
Request each HTTPS hostname directly and inspect the certificate chain and subject names. Ensure the certificate at the terminating layer covers the exact name, not merely a different subdomain. Correct this before interpreting redirect responses.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
4. Inspect every hop
Use a header-following client so you can see each status and Location value:
curl -I -L http://example.com/path?x=1
curl -I -L http://www.example.com/path?x=1
curl -I -L https://www.example.com/path?x=1
curl -I -L https://example.com/path?x=1For diagnosis, omit -L on a single request to inspect only the first response:
curl -I https://www.example.com/path?x=1The final response should be the canonical HTTPS apex URL, with the same path and query. A normal setup converges in one or two expected redirects; repeated alternation indicates a conflict.
5. Identify the layer emitting each response
Inspect edge Redirect Rules and “Always Use HTTPS,” then the load balancer, reverse proxy, Apache or Nginx configuration, and finally the application or CMS. Response headers can reveal which layer answered, but do not rely on one header alone because intermediaries may remove or rewrite them.
6. Correct the forwarded scheme
If TLS ends at a proxy, configure the origin to recognize the original HTTPS scheme and trust the proxy’s forwarded headers. Otherwise, the origin may issue a new HTTPS redirect for every request and the browser will report too many redirects.
7. Avoid Flexible-loop configurations
Cloudflare Tunnel guidance says that when an origin itself redirects HTTP to HTTPS, use an HTTPS service URL or remove the origin redirect and use HTTP consistently between the tunnel and origin. It specifically advises against switching to Flexible to solve the loop. Flexible encryption can leave the edge-to-origin leg on HTTP while the origin insists on HTTPS, causing the same request to repeat.
8. Retest before making the redirect permanent
Use a temporary redirect while editing. Test all four scheme/host combinations, several paths, an empty query, and a query with multiple parameters. Once the chain is correct, change only the canonicalization rule to 301 and repeat the tests from a fresh client.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Recognize common failure patterns
| Symptom | Likely cause | Correction |
|---|---|---|
https://www stays on www |
No www-to-apex rule, or www bypasses the edge |
Route www to the rule owner and add one host redirect |
Browser shows a certificate warning on www |
Certificate lacks www.example.com |
Install coverage at the layer terminating TLS |
| “Too many redirects” after enabling HTTPS | Origin sees proxied HTTPS as HTTP, or edge and origin both redirect | Fix forwarded-scheme trust and remove duplicate rules |
Path changes to / |
Target omits the captured path | Use a target containing the path variable |
| Tracking parameters disappear | Query preservation is disabled | Enable query-string preservation and retest |
| Only some networks fail | Different DNS answers, stale caches, or split routing | Compare DNS and certificate responses from each network |
Temporary versus permanent status codes
A 301 tells browsers and intermediaries that the host mapping is permanent. That is appropriate once the canonical direction, certificate, path, and query behavior are verified. During setup, a temporary redirect makes rollback easier because clients and caches are less likely to retain the old destination. Do not switch to 301 merely because the first browser test worked; validate all four input combinations and representative deep links first.
Application and web-server checks
Apache
Review rewrite conditions that test %{HTTPS}. When TLS terminates upstream, that variable can be off even for a user’s HTTPS request. Make the proxy’s original scheme available and configure the application to trust it, or place the redirect entirely at the edge and let Apache serve the final HTTPS request without another redirect.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Nginx and reverse proxies
Inspect server blocks, listener rules, and proxy-header settings for both hostnames. Ensure the canonical host is not redirected back to www, and ensure the upstream receives the original host and scheme needed to generate correct absolute URLs.
CMS and application settings
Set the application’s base URL to the HTTPS apex. Disable host-canonicalization plugins or middleware that enforce the opposite direction. If the application generates HTTP links after the redirect is fixed, that is a scheme-awareness problem rather than evidence that another redirect is needed.
Validation checklist
- Both hostnames resolve to the intended edge or origin.
- The terminating certificate covers both apex and
www. - Exactly one rule redirects HTTPS
wwwto HTTPS apex. - HTTP requests are upgraded by the chosen layer without an origin loop.
- The redirect keeps the complete path.
- The redirect keeps the query string.
- The canonical HTTPS apex responds without another redirect.
- Proxy-terminated TLS is represented correctly to the origin.
- Cloudflare encryption mode is compatible with the origin’s scheme behavior; Flexible is not being used as a loop workaround.
- Tests pass for the four host/scheme combinations and for deep links.
When to use a different canonical direction
Some organizations intentionally keep www.example.com as canonical. That is valid, but it requires the opposite single rule: match https://example.com/*, target https://www.example.com/${1}, return 301, and preserve the query string. The same DNS, certificate, proxy-scheme, and testing requirements apply. Choose one direction and remove rules that enforce the other.
Final diagnostic principle
Separate the questions “Did this request reach HTTPS?” and “Did it reach the canonical hostname?” Then determine which layer answered each hop. Once DNS, certificate coverage, redirect ownership, and forwarded-scheme handling all agree, https://www.example.com/path can reliably become https://example.com/path without losing the path, query, or request in a loop.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
