|
1 | 1 | --- |
2 | 2 | pcx_content_type: concept |
3 | | -title: How proxying works (TBD) |
| 3 | +title: About proxying |
4 | 4 | sidebar: |
5 | 5 | order: 2 |
6 | 6 | label: About |
7 | 7 | --- |
8 | 8 |
|
9 | 9 | import { Render, Example } from "~/components"; |
10 | 10 |
|
11 | | -The **Proxy status** of a DNS record affects how Cloudflare treats incoming traffic to that record. |
| 11 | +While your [DNS records](/dns/manage-dns-records/) are used to make your website or application available to visitors and other web services, the **Proxy status** of a DNS record is used to define how Cloudflare treats incoming traffic to that record. |
12 | 12 |
|
| 13 | +The records you can proxy through Cloudflare are [IP address resolution records](/dns/manage-dns-records/reference/dns-record-types/#ip-address-resolution) — meaning A, AAAA, or CNAME records. Cloudflare recommends enabling our proxy for all A, AAAA, and CNAME records that are used for serving web traffic. |
13 | 14 |
|
14 | 15 | ### Proxied records |
15 | 16 |
|
16 | | -When you proxy DNS records through Cloudflare — specifically [A, AAAA, or CNAME records](/dns/manage-dns-records/reference/dns-record-types/#ip-address-resolution) — Cloudflare responds with an [anycast IP address](/fundamentals/concepts/cloudflare-ip-addresses/) **instead of** the value defined on your [DNS table](/dns/manage-dns-records/#dns-records-table). This means that all requests intended for proxied hostnames will go to Cloudflare first and then be forwarded to your origin server. |
| 17 | +When you set a DNS record to **Proxied**, Cloudflare can: |
17 | 18 |
|
18 | | -```mermaid |
19 | | -flowchart LR |
20 | | -accTitle: Connections with Cloudflare |
21 | | -A[Visitor] <-- Connection --> B[Cloudflare global network] <-- Connection --> C[Origin server] |
22 | | -``` |
| 19 | +- Protect your origin server from [DDoS attacks](https://www.cloudflare.com/learning/ddos/what-is-a-ddos-attack/). |
| 20 | +- [Optimize, cache, and protect](/fundamentals/setup/manage-domains/connect-your-domain/#domain-configurations) all requests to your application. |
| 21 | +- Apply your configurations for a variety of [Cloudflare products](/dns/proxy-status/cloudflare-configuration/). |
23 | 22 |
|
24 | | -This behavior allows Cloudflare to [optimize, cache, and protect](/fundamentals/concepts/how-cloudflare-works/) all requests to your application, as well as protect your origin server from [DDoS attacks](https://www.cloudflare.com/learning/ddos/what-is-a-ddos-attack/). |
| 23 | +Apart from that, proxied DNS records have specific predefined fields and expected behavior — refer to [Proxied records](/dns/manage-dns-records/proxy-status/proxied-records/) for details. |
25 | 24 |
|
26 | | -Cloudflare recommends enabling our proxy for all [A, AAAA, and CNAME](/dns/manage-dns-records/reference/dns-record-types/#ip-address-resolution) records that are used for serving web traffic. Refer to [Proxied DNS records](/dns/manage-dns-records/proxy-status/proxied-records/) for details and expected behavior. |
| 25 | +To understand how Cloudflare responds to requests for proxied records, consider [How proxying works](/dns/proxy-status/about-proxying/#how-proxying-works) below. |
27 | 26 |
|
28 | 27 | ### DNS-only records |
29 | 28 |
|
30 | 29 | When an A, AAAA, or CNAME record is **DNS-only** (also known as being gray-clouded), DNS queries for this record will resolve to the record's normal IP address. |
31 | 30 |
|
32 | | -In addition to potentially exposing your origin IP addresses to bad actors and [DDoS attacks](https://www.cloudflare.com/learning/ddos/what-is-a-ddos-attack/), leaving your records as **DNS-only** means that Cloudflare cannot [optimize, cache, and protect](/fundamentals/concepts/how-cloudflare-works/) requests to your application or provide analytics on those requests. |
| 31 | +In addition to potentially exposing your origin IP addresses to bad actors and [DDoS attacks](https://www.cloudflare.com/learning/ddos/what-is-a-ddos-attack/), leaving your records as **DNS-only** means that: |
| 32 | + |
| 33 | +- Cloudflare cannot [optimize, cache, and protect](/fundamentals/setup/manage-domains/connect-your-domain/#domain-configurations) requests to your domain. |
| 34 | +- Cloudflare cannot provide analytics on those requests. |
| 35 | +- Your configuration for a variety of [Cloudflare products](/dns/proxy-status/cloudflare-configuration/) will not be applied. |
33 | 36 |
|
34 | 37 | --- |
35 | 38 |
|
36 | | -## Detailed explanation |
| 39 | +## How proxying works |
| 40 | + |
| 41 | +```mermaid |
| 42 | +flowchart LR |
| 43 | +accTitle: Connections with Cloudflare |
| 44 | +A[Visitor] <-- Connection --> B[Cloudflare global network] <-- Connection --> C[Origin server] |
| 45 | +``` |
| 46 | + |
| 47 | +When you set a DNS record to **Proxied**, Cloudflare responds with an [anycast IP address](/fundamentals/concepts/cloudflare-ip-addresses/) **instead of** the value defined on your [DNS table](/dns/manage-dns-records/#dns-records-table). This means that all requests intended for proxied hostnames will go to Cloudflare first and then be forwarded to your origin server. |
37 | 48 |
|
38 | 49 | <Render file="proxy-status-dns-table" /> |
39 | 50 |
|
|
0 commit comments