Hey y'all, I have a domain on cf ent with cname activation and want to convert it to primary DNS. T

Hey y'all, I have a domain on cf ent with cname activation and want to convert it to primary DNS.

The problem is that I need to configure custom DNS servers and dnssec prior to making the changes. Do you think it's possible to do that ahead of time since I need the DS and glue records to propagate? Trying to avoid downtime

Original message was deleted

fleabeard•2/8/24, 11:28 PM

Hi Leo, that's what I was thinking. I'm just not sure how to get rid of the Linode ones as it automagically creates them. Perhaps I can just forego that aspect of it in the Linode panel all together?

Yyev Hey y'all, I have a domain on cf ent with cname activation and want to convert i...

Erisa•2/8/24, 11:40 PM

After you change the state of the zone from partial to full it will stay active and let you configure all the settings that come with a full setup zone, so you can set custom nameservers and retrieve dnssec values before updating anything at your registrar. Then when you're ready you can set the custom nameservers and glue records at your registrar, and it should seamlessly swap over.

I would be careful with dnssec though, as doing it wrong can cause some brutal downtime. It may be safer to disable dnssec temporarily while you move things across and then set it up with cf values once you're good. This shouldn't take too long. Because if theres desync between dnssec records and nameservers, it can cause some bad stuff to happen.

EErisa After you change the state of the zone from partial to full it will stay active ...

yevOP•2/9/24, 12:01 AM

Thank you! Good point that nothing happens until you process the DNS server changes with the registrar

yevOP•2/9/24, 12:02 AM

And yes I intend to preserve the old DS keys for a week since my registrar makes it easy to have multiple keys

yevOP•2/9/24, 12:17 AM

Also .bank and .insurance tlds require dnssec and won't propagate without it so disabling it temporarily isn't an option :/

Yyev And yes I intend to preserve the old DS keys for a week since my registrar makes...

Erisa•2/9/24, 12:31 AM

Ah okay I'm not used to having that option, in that case you can add the cf records and it should be fine when you switch over

EErisa Ah okay I'm not used to having that option, in that case you can add the cf reco...

yevOP•2/9/24, 12:33 AM

Yeah I figured, thanks for confirming. We already imported the records and just wanted to make sure the proxied records using cname activation kept doing their thing.

yevOP•2/9/24, 12:34 AM

It would throw warnings in DNSviz but won't cause any issues having a 2nd key in the mix

Phatso•2/9/24, 12:50 AM

Is there any documentation for building redirect rules? I'm at the field but have no idea what to write in it.

I want to take any request to domain.com/path/blahdomain.com/path/blah to domain.com/blahdomain.com/blah
essentially just replacing

/path

/path

with

Rapid•2/9/24, 1:53 AM

If I use imagesimages using an external source (cloudfront), I will only pay for transformations right?

Erisa•2/9/24, 2:19 AM

Correct, only transformations

Erisa•2/9/24, 2:20 AM

Pick the $0 plan and then its just pay as you go for transformations

Rapid•2/9/24, 2:29 AM

Thanks, how is it "protected" from being abused by others?

Rapid•2/9/24, 2:29 AM

So I dont get 100K bill suddenly ;p

Rapid•2/9/24, 2:29 AM

And does every serve of an image count as a transformation? (if it has the same height/width/quality)

Erisa•2/9/24, 2:31 AM

Its unique transforms per month so same image and params is 1 transform no matter how much it gets served

Rapid•2/9/24, 2:31 AM

Okay, sounds good! Only noticed the option to store it somewhere else few minutes ago. Storing in cloudflare costs too much $$$$$$$$$$$

Rapid•2/9/24, 2:31 AM

;-D

Erisa•2/9/24, 2:32 AM

Luckily you don't have to :)

jetpackjoe•2/9/24, 4:03 AM

is DNS propgation having issues? I am trying to create a new pages project and it just timed out on DNS propagation. myapp.pages.dev is still not resolving after about 5 minutes

Jjetpackjoe is DNS propgation having issues? I am trying to create a new pages project and ...

jetpackjoe•2/9/24, 4:45 AM

still not propagating. hopefully its fixed by the morning

jetpackjoe•2/9/24, 5:22 AM

seems to be working now

Kasumi•2/9/24, 6:33 AM

Is gRPC just for API gateway?

zegevlier•2/9/24, 10:46 AM

Other than what you mentioned, none really

EEthan What is the consequence of using a Critical-Production domain on the free plan. ...

Erisa•2/9/24, 12:44 PM

Sometimes features roll out to free plan first which can cause some unexpected instability if a change has an issue that isn't caught before then, but other than that + support and SLA like you mentioned, its fine. You can even run a commercial site on free plan if you want.

Digital Forensic•2/9/24, 4:41 PM

hey guys

Digital Forensic•2/9/24, 4:41 PM

lokiwind•2/9/24, 5:13 PM

Refer to https://cfl.re/3VUQyyL for assistance. The zone you are trying to upgrade is marked as Do Not Upgrade.

Refer to https://cfl.re/3VUQyyL for assistance. The zone you are trying to upgrade is marked as Do Not Upgrade.

lokiwind•2/9/24, 5:14 PM

I get this error when adding a domain to the account. How can I fix it?

Unsmart•2/9/24, 5:59 PM

https://developers.cloudflare.com/network/websockets/#what-happens-if-my-site-exceeds-the-number-of-concurrent-websockets-connections-that-cloudflare-expects

What happens if my site exceeds the number of concurrent WebSockets connections that Cloudflare expects?
Immediately, nothing. Cloudflare will allow occasional spikes in usage beyond our guidelines and we will not apply unnecessary limits.

Repeated spikes or high continued usage will prompt a dialogue. Cloudflare will reach out to learn more about your application. We will not impose limit errors for any application without contacting the customer unless we suspect that abuse or an attack is involved.

Customers whose usage claims a disproportionate percentage of resources for their current plan level may be asked to upgrade to the plan level that matches their needs.

Unsmart•2/9/24, 6:00 PM

No set limits so if its a critical application you should pick an appropriate plan.

Smetc•2/9/24, 6:09 PM

If you have two sets of nameservers like the pair “amy.ns.cloudflare.com” “adam.ns.cloudflare.com” and a second set of nameservers like “bailey.ns.cloudflare.com” “bay.ns.cloudflare.com”. Is there a way to choose which nameservers you want on a new account creation?

SSmetc If you have two sets of nameservers like the pair “amy.ns.cloudflare.com” “adam....

Hello, I’m Allie!•2/9/24, 6:23 PM

Each set of nameservers is tied to an account, so to choose which set to use, choose the right account

HHello, I’m Allie!Each set of nameservers is tied to an account, so to choose which set to use, ch...

Smetc•2/9/24, 6:25 PM

We have two different sets tied to one account due to the amount of domains.

SSmetc We have two different sets tied to one account due to the amount of domains.

Smetc•2/9/24, 6:34 PM

Sorry I should correct myself, when I say account creation I meant adding a site in an already existing account. So is there a way to choose which pair of nameservers a new site chooses?

SSmetc Sorry I should correct myself, when I say account creation I meant adding a site...

Ɽ

ⱤØ₥₳₦•2/9/24, 6:40 PM

I'd love to know what practical difference it will bring on the table

SSmetc Sorry I should correct myself, when I say account creation I meant adding a site...

Hello, I’m Allie!•2/9/24, 6:42 PM

I don't think so then? The only way to pick the nameserver(afaik) is with a vanity nameserver

ⱤⱤØ₥₳₦I'd love to know what practical difference it will bring on the table 👀

Smetc•2/9/24, 6:46 PM

A client wanted me to stop managing their DNS, so I deleted it out of my cloudflare account. He realized later he doesn’t know how to access his domain registrar to update the records and want us to re-manage it. I thought since the nameservers are still pointed to us it shouldn’t be an issue, but they default to the second pair of nameservers on a new site creation

HHello, I’m Allie!I don't think so then? The only way to pick the nameserver(afaik) is with a vani...

Smetc•2/9/24, 6:49 PM

Thank you for looking! I was looking through the api to see if it’ll let you on site creation, but no dice. Also I guess the cloudflare terminology is a “zone”

Smetc•2/9/24, 6:50 PM

I’ll let them know that they need to find the domain registrar account no matter what

Original message was deleted

Cyb3r-Jak3•2/9/24, 6:55 PM

Is .local a valid TLD? I’d figure cloudflared would try to resolve it

UUnsmart No clue 🤷

zwily•2/9/24, 7:11 PM

Just FYI (and for anyone searching on these keywords in the future...) I fixed this by setting my zone to "Full" SSL instead of "Flexible".

(Maybe this is documented somewhere, but I'm pretty sure I never set this on this domain, so Flexible must have been the default.)

Brandon | Cloudflare TSE•2/9/24, 7:22 PM

ugh.

Brandon | Cloudflare TSE•2/9/24, 7:22 PM

why would two records aimed at the same R2 bucket have http/2 working on one and only http/1.1 working on the other

Hey y'all, I have a domain on cf ent with cname activation and want to convert it to primary DNS. T

Similar Threads

Similar Threads

Similar Threads