You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The DNS analytics dashboard contains [four main panels](#dns-analytics-panels). The filters and time frame that you specify at the top of the page apply to all of them.
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/login) and select your account and domain.
53
-
2. In **DNS** > **Settings**, make sure that **CNAME flattening for all CNAME records** is turned off.
54
-
3. Go to **DNS** > **Records** and find the CNAME record you would like to flatten.
55
-
4. Select **Edit** and turn on the **Flatten** option.
56
-
5. Select **Save** to confirm.
54
+
1. On the [**DNS Settings**](https://dash.cloudflare.com/?to=/:account/:zone/dns/settings) page, make sure that **CNAME flattening for all CNAME records** is turned off.
55
+
2. Go to the [**DNS Records**](https://dash.cloudflare.com/?to=/:account/:zone/dns/records) page and find the CNAME record you would like to flatten.
56
+
3. Select **Edit** and turn on the **Flatten** option.
57
+
4. Select **Save** to confirm.
57
58
58
59
:::note[Unavailable flatten option]
59
60
For the following cases, **Flatten** will not be available:
Copy file name to clipboardExpand all lines: src/content/docs/dns/dnssec/dnssec-active-migration.mdx
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -36,7 +36,7 @@ The provider you are migrating from must allow you to add DNSKEY records on the
36
36
37
37
To import the zone file using the API, refer to the [Import DNS Records endpoint](/api/resources/dns/subresources/records/methods/import/).
38
38
39
-
3.Go to **DNS** > **Settings**, and select **Enable DNSSEC**. Or use the following [API request](/api/resources/dns/subresources/dnssec/methods/edit/).
39
+
3.On the [**DNSSettings**](https://dash.cloudflare.com/?to=/:account/:zone/dns/settings) page, select **Enable DNSSEC**. Or use the following [API request](/api/resources/dns/subresources/dnssec/methods/edit/).
40
40
41
41
<APIRequest
42
42
path="/zones/{zone_id}/dnssec"
@@ -46,7 +46,7 @@ The provider you are migrating from must allow you to add DNSKEY records on the
46
46
}}
47
47
/>
48
48
49
-
4.Go to **DNS** > **Settings**, and enable **Multi-signer DNSSEC**. Or use the following [API request](/api/resources/dns/subresources/dnssec/methods/edit/).
49
+
4.On the [**DNSSettings**](https://dash.cloudflare.com/?to=/:account/:zone/dns/settings) page, enable **Multi-signer DNSSEC**. Or use the following [API request](/api/resources/dns/subresources/dnssec/methods/edit/).
This page explains how you can enable [multi-signer DNSSEC](/dns/dnssec/multi-signer-dnssec/about/) with Cloudflare, using the [model 2](/dns/dnssec/multi-signer-dnssec/about/#model-2) as described in [RFC 8901](https://www.rfc-editor.org/rfc/rfc8901.html).
12
12
@@ -16,7 +16,7 @@ Note that:
16
16
17
17
- This process requires that your other DNS provider(s) also support multi-signer DNSSEC.
18
18
- Although you can complete a few steps via the dashboard, currently the whole process can only be completed using the API.
19
-
- Enabling **DNSSEC** and **Multi-signer DNSSEC**in [**DNS** > **Settings**](https://dash.cloudflare.com/?to=/:account/:zone/dns/settings) only replaces the first step in [1. Set up Cloudflare zone](#1-set-up-cloudflare-zone). You still have to follow the rest of this tutorial to complete the setup.
19
+
- Enabling **DNSSEC** and **Multi-signer DNSSEC**on the [**DNSSettings**](https://dash.cloudflare.com/?to=/:account/:zone/dns/settings) page only replaces the first step in [1. Set up Cloudflare zone](#1-set-up-cloudflare-zone). You still have to follow the rest of this tutorial to complete the setup.
20
20
21
21
## 1. Set up Cloudflare zone
22
22
@@ -26,16 +26,18 @@ If you use Cloudflare as a primary DNS provider, meaning that you manage your DN
26
26
27
27
<TabssyncKey="dashPlusAPI">
28
28
<TabItemlabel="Dashboard">
29
-
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/login) and select your account and zone.
30
-
2. Go to **DNS** > **Settings**.
31
-
3. Select **Enable DNSSEC** and **Confirm**.
29
+
1. In the Cloudflare dashboard, go to the **DNS Settings** page.
For the purpose of this tutorial, you will update your registrar with the DS record later, in [Step 3](/dns/dnssec/multi-signer-dnssec/setup/#3-set-up-registrar).
35
37
:::
36
38
37
-
4. Also enable **Multi-signer DNSSEC** and **Multi-provider DNS**.
38
-
5. Go to **DNS** > **Records** and create the following records at your zone apex (meaning you should use `@` in the record **Name** field):
39
+
3. Also enable **Multi-signer DNSSEC** and **Multi-provider DNS**.
40
+
4. Go to the [**DNSRecords**](https://dash.cloudflare.com/?to=/:account/:zone/dns/records) page and create the following records at your zone apex (meaning you should use `@` in the record **Name** field):
39
41
- A [DNSKEY record](/dns/manage-dns-records/reference/dns-record-types/#ds-and-dnskey) with the zone signing key(s) (ZSKs) of your external provider(s).
40
42
- An [NS record](/dns/manage-dns-records/reference/dns-record-types/#ns) with your external provider nameservers.
41
43
@@ -108,17 +110,19 @@ If you use Cloudflare as a secondary DNS provider, do the following:
108
110
<TabssyncKey="dashPlusAPI">
109
111
<TabItemlabel="Dashboard">
110
112
111
-
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com/login) and select your account and zone.
112
-
2. Go to **DNS** > **Settings**.
113
-
3. For **DNSSEC with Secondary DNS** select **Live signing**.
113
+
1. In the Cloudflare dashboard, go to the **DNS Settings** page.
2. For **DNSSEC with Secondary DNS** select **Live signing**.
114
118
115
119
:::note
116
120
For the purpose of this tutorial, you will update your registrar with the DS record later, in [Step 3](/dns/dnssec/multi-signer-dnssec/setup/#3-set-up-registrar).
117
121
:::
118
122
119
-
4. Also enable **Multi-signer DNSSEC**.
120
-
5. Add the zone signing key(s) (ZSKs) of your external provider(s) to a DNSKEY record at your primary DNS provider. This record should be transferred successfully to Cloudflare.
121
-
6. Add your external provider(s) nameservers as NS records on your zone apex at your primary DNS provider. These records should be transferred successfully to Cloudflare.
123
+
3. Also enable **Multi-signer DNSSEC**.
124
+
4. Add the zone signing key(s) (ZSKs) of your external provider(s) to a DNSKEY record at your primary DNS provider. This record should be transferred successfully to Cloudflare.
125
+
5. Add your external provider(s) nameservers as NS records on your zone apex at your primary DNS provider. These records should be transferred successfully to Cloudflare.
1. Log in to the [Cloudflare dashboard](https://dash.cloudflare.com) and select your account and zone.
34
-
2. Go to **DNS** > **Records**.
35
-
3. On **Custom nameservers**, select **Configure**.
36
-
4. Select **Create custom nameservers just for `your-domain.com`** and enter the subdomains used for the ZCNS names (for example, `ns1`, `ns2`, `ns3`).
37
-
5. Select **Save** to confirm.
33
+
1. In the Cloudflare dashboard, go to the **DNS Records** page.
2. On **Custom nameservers**, select **Configure**.
38
+
3. Select **Create custom nameservers just for `your-domain.com`** and enter the subdomains used for the ZCNS names (for example, `ns1`, `ns2`, `ns3`).
39
+
4. Select **Save** to confirm.
38
40
39
41
</TabItem> <TabItemlabel="API">
40
42
@@ -66,9 +68,11 @@ To remove zone custom nameservers (and their associated, read-only DNS records):
0 commit comments