Hey, i have a question, i have a worker at `x.domain.com` and from another domain i made a DNS Only

Hey, i have a question, i have a worker at

x.domain.com

x.domain.com

x.domain.com

x.domain.com and from another domain i made a DNS Only CNAME from

y.other-domain.com

y.other-domain.com

y.other-domain.com

y.other-domain.com to point to

x.domain.com

x.domain.com

x.domain.com

x.domain.com but i get 522 from the other domain

Mees•9/5/24, 9:08 PM

Does the advanced certificate manager apply to only one zone or to all zones in my account?

MMees Does the advanced certificate manager apply to only one zone or to all zones in ...

Chaika•9/5/24, 9:14 PM

One zone for pay as you go. There is an account-wide enterprise acm option

RRares Hey, i have a question, i have a worker at `x.domain.com` and from another domai...

Chaika•9/5/24, 9:14 PM

yea, you can't use Workers like that, they're not normal servers/origins. Is the other domain in your account/in Cloudflare?

RaresOP•9/5/24, 9:15 PM

yes, but i want a method to can point domains from end users to mine

77wonders If my edge certs look like this i.e. already Total TLS but with lets encrypt, do...

Chaika•9/5/24, 9:15 PM

All the certs that would have been switched over should already be switched over by this point
https://developers.cloudflare.com/ssl/reference/migration-guides/lets-encrypt-chain/
For Total TLS, you have to pick the different Cert. Authority

Cloudflare will not change Total TLS certificates automatically.

RRares yes, but i want a method to can point domains from end users to mine

Chaika•9/5/24, 9:15 PM

ah ok then you want CF For SaaS/Custom Hostnames
https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/start/advanced-settings/worker-as-origin/

RaresOP•9/5/24, 9:16 PM

Ah, thank you

Chaika•9/5/24, 9:16 PM

It's what Pages/R2 uses for Custom Domains, for example. Lets you add customer domains, issues ssl/tls for them, etc. 100 custom hostnames included for free and then $0.10/per hostname/per month for over that

RaresOP•9/5/24, 9:17 PM

In pricing for CF SaaS, what is Scripts?

RRares In pricing for CF SaaS, what is Scripts?

Chaika•9/5/24, 9:31 PM

you're looking at the wrong thing lol

Chaika•9/5/24, 9:31 PM

sounds like you're looking at WfP

Chaika•9/5/24, 9:32 PM

CF For SaaS is SSL/TLS -> Custom Hostnames

RaresOP•9/5/24, 9:32 PM

i bought the workers platform stuff

RaresOP•9/5/24, 9:32 PM

and at pricing

RaresOP•9/5/24, 9:32 PM

i was wondering

RaresOP•9/5/24, 9:32 PM

what are scripts

Chaika•9/5/24, 9:33 PM

you don't need that for what you wanted to do/just sending traffic to a worker from customer domains. WfP is for letting users dynamically upload workers "scripts" for running them. It's like CF Pages w/ uploading your own functions

RaresOP•9/5/24, 9:34 PM

ah, thank you

RaresOP•9/5/24, 10:15 PM

The DCV needs to be placed on my domain right?

Mmia any place to file a bug for this or something? should I go to support?

Chaika•9/6/24, 2:42 AM

nah that's nothing new/just how that works, been that way forever: https://community.cloudflare.com/t/mx-record-set-is-not-showing-the-same-in-lookup/391704/2?u=chaika
My understanding is mail servers generally don't have an issue with it because they do their own recursive lookups, lots of edge cases with mail

Chaika•9/6/24, 2:48 AM

now I wonder which ones wouldn't work with that. Postfix and Exim both have their own internal dns resolver it looks, maybe they all just do to ensure they confirm to the mail spec and handle cases like resolving spf records with precision. Mail is fun

Mmia \- the lookup resolves fine for non-wildcards

Chaika•9/6/24, 2:57 AM

what do you mean "Resolves fine for non-wildcards"? It has the same behavior for non-wildcards and wildcards pointing to proxied records as far as I can see, still resolves fine for mailserver lookups: https://mxtoolbox.com/SuperTool.aspx?action=mx%3aok.mx-test.yarn.network&run=toolpage

MxToolbox

Network Tools: DNS,IP,Email

Ccraftxbox Just a curious question, Is it possible to register subdomains with cloudflare d...

Chaika•9/6/24, 2:59 AM

Business can do subdomains (partial zones) with CNAMEs as long as the underlying domain isn't using Cf DNS, and ENT can do partial zones with Nameserver delegation regardless of underlying DNS.
Other then that you can use CF For SaaS (SSL/TLS -> Custom Hostnames), free has 100 included, it can kind of work but is a bit hacky of a setup

CChaika what do you mean "Resolves fine for non-wildcards"? It has the same behavior for...

Idle•9/6/24, 3:00 AM

Also the rfc on wildcard mx entries specifically discourages the use of them xd

Idle•9/6/24, 3:00 AM

which makes a lot of sense

Ccraftxbox sadly i don't think my budget of 5$ can afford enterprise 😅

Chaika•9/6/24, 3:01 AM

well you have the CF For SaaS option even on free but it's hacky, can only have one origin server for all on them on free and it basically proxies the subdomain's traffic through that existing zone and it runs through your rules/etc within that zone