Skip to content

[DNS] Update index.mdx #24314

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 2 commits into from
Closed

[DNS] Update index.mdx #24314

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
09f46ad
[DNS] Update index.mdx
ngayerie Aug 11, 2025
b2fc53c
[DNS] Update index.mdx
ngayerie Aug 11, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 10 additions & 1 deletion src/content/docs/dns/proxy-status/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -95,4 +95,13 @@ When an A, AAAA, or CNAME record is **DNS-only** — also known as being gray-cl

In addition to potentially exposing your origin IP addresses to bad actors and [DDoS attacks](https://www.cloudflare.com/learning/ddos/what-is-a-ddos-attack/), leaving your records as **DNS-only** means that Cloudflare cannot [optimize, cache, and protect](/fundamentals/concepts/how-cloudflare-works/) requests to your application or provide analytics on those requests.

<Render file="mix-proxied-and-unproxied" product="dns" />
<Render file="mix-proxied-and-unproxied" product="dns" />

## Verification records

Service providers might require to create a DNS verification record, usually a TXT or CNAME record.
In the case of a CNAME record, it needs to be set to DNS-only on the Cloudflare Dashboard: your service provider needs to be able to resolve this record to the value they've asked you to configure.
As proxied records will return Cloudflare IPs, verification CNAME needs to be set to DNS-only.

[CNAME flattening](/dns/cname-flattening/) also may interfere in the verification process: it is recommended to disable CNAME flattening if you need to set up verification CNAME records.

Loading