you cant create subdomain zones with just business plan, and creating a second zone as partial for t

you cant create subdomain zones with just business plan, and creating a second zone as partial for the same domain doesnt work because a domain can only be on one zone at once regardless of type
you need enterprise to create the subdomain zone for this

sachin gupta•2/18/25, 2:13 PM

becasue i want to used cloudflare certificate

sachin gupta•2/18/25, 2:13 PM

i have enterprise plan

ErisaOP•2/18/25, 2:14 PM

then create a subdomain zone

MattIPv4•2/18/25, 2:14 PM

:This: If you have ENT, create a subdomain zone and then add the cert in that zone, so it'll be scoped to just that zone/subdomain

ErisaOP•2/18/25, 2:14 PM

https://developers.cloudflare.com/dns/zone-setups/subdomain-setup/

Cloudflare Docs

Subdomain setup · Cloudflare DNS docs

When you use a subdomain setup, you can manage the Cloudflare configurations for one or more subdomains separately from those associated with your apex domain. This means that, on your account homepage, you would find websites like example.com or blog.example.com listed as separate zones.

EErisa you cant create subdomain zones with just business plan, and creating a second z...

Laudian•2/18/25, 2:15 PM

Oh, I forgot that partial zones still can't be subdomains.

ErisaOP•2/18/25, 2:18 PM

if all is well and total tls is working as designed, no
but if a total tls cert fails to issue, fails to renew or otherwise goes missing / isnt ready yet, universal is used as a backup

Original message was deleted

Laudian•2/18/25, 2:18 PM

It gets used if you manually delete a hostname from Total TLS or exceed the number of certificates that are available on ACM.

LLaudian It gets used if you manually delete a hostname from Total TLS or exceed the numb...

ErisaOP•2/18/25, 2:19 PM

total tls certs dont count towards the limit of advanced certs

Original message was deleted

ErisaOP•2/18/25, 2:19 PM

no, universal will always use whatever was randomly selected for your zone, no matter what you pick for total tls

EErisa total tls certs dont count towards the limit of advanced certs

Laudian•2/18/25, 2:19 PM

Well, let me join the til club.

ErisaOP•2/18/25, 2:20 PM

sometimes, but usually only when they deprecate CAs

ErisaOP•2/18/25, 2:20 PM

e.g. if you had digicert before, now youll have a different one

ErisaOP•2/18/25, 2:21 PM

if you want to guarentee the CA is always the same, issue a manual advanced cert for example.com and *.example.com, disable universal and use the manually issued one as the fallback instead

WWTDawson9 Enjoy the security risks

Edu Pintilie•2/18/25, 2:21 PM

Enjoy the lag

ErisaOP•2/18/25, 2:22 PM

yea

MMattIPv4 I can't imagine they're going to revert, most websites build themselves in a way...

Edu Pintilie•2/18/25, 2:22 PM

What is polyfill?

ErisaOP•2/18/25, 2:22 PM

disabling universal and using only advanced is good if you want control over your certs and their CAs

EEdu Pintilie What is polyfill?

MattIPv4•2/18/25, 2:23 PM

Extra code that you ship to the browser to recreate modern features in older browsers

EEdu Pintilie Enjoy the lag 👍🏻

WTDawson9•2/18/25, 2:23 PM

100 tabs and no lag

WWTDawson9 100 tabs and no lag 👍

Edu Pintilie•2/18/25, 2:24 PM

I have 1200 tabs on chrome 88 (mobile) and still it's pretty useable

Edu Pintilie•2/18/25, 2:24 PM

With 100 it flies

Original message was deleted

ErisaOP•2/18/25, 2:24 PM

yeah pin it to the google CA, disable universal and only issue advanced google certs

Edu Pintilie•2/18/25, 2:24 PM

Try opening 1200 tabs (not empty)

MattIPv4•2/18/25, 2:26 PM

I have never once wanted my browser to have 1,200 tabs open

MattIPv4•2/18/25, 2:27 PM

I have frequently wanted my browser to not have RCEs

MattIPv4•2/18/25, 2:27 PM

Each to their own though :nod: But this argument about Cf supporting older browsers isn't going anywhere

MMattIPv4 Each to their own though :nod: But this argument about Cf supporting older brows...

Edu Pintilie•2/18/25, 2:28 PM

Original message was deleted

Laudian•2/18/25, 2:28 PM

You can't multitask 1200 things at once? Pathetic.

ErisaOP•2/18/25, 2:29 PM

Look, you can use whatever browser you want. But arguing or continuing to discuss it at length here isn't productive and it would be great if we could move on from that

Edu Pintilie•2/18/25, 2:30 PM

The old discord app versions saved my ip from getting leaked

Edu Pintilie•2/18/25, 2:30 PM

3 times

ErisaOP•2/18/25, 2:32 PM

That's great but it's not on-topic for this channel nor relevant to the server, lets get back to discussing Cloudflare (and NOT how it relates to old browsers, that has been discussed to death already), thanks

Edu Pintilie•2/18/25, 2:34 PM

#offthen

Edu Pintilie•2/18/25, 2:34 PM

#off-topic

EEdu Pintilie I have 1200 tabs on chrome 88 (mobile) and still it's pretty useable

WTDawson9•2/18/25, 2:37 PM

I've done it before, pretty much all of them went to "sleep" so saved on resources.
No lag

Edu Pintilie•2/18/25, 2:37 PM

On mobile?

WTDawson9•2/18/25, 2:37 PM

Anyway

MANTO999•2/18/25, 4:42 PM

:NotLikeThis:

Weibeu•2/18/25, 6:43 PM

InfinitiReach•2/18/25, 8:02 PM

hey everyone , last night i attempted to connect our domain on cloudfare to a funnel in a Go high level sub account without realizing it was already connected to a seperate GHL account . Error message popped up on the new GHL Sub account - said this domain is already connected to a seperate account and that was the end of it . Ever since that moment , Now cloudfare keeps giving me Error 1000 DNS points to prohibited IP even though

PuffDragon•2/19/25, 2:50 AM

hey guys I got a quest about DNS A records

PPuffDragon hey guys I got a quest about DNS A records

MattIPv4•2/19/25, 2:51 AM

Yes..?

MMattIPv4 Yes..?

PuffDragon•2/19/25, 2:53 AM

so Iwant to set up 2 A records, for instance
work.example.com and home.example.com

with different IPs

and then further subs
cloud.work.example.com

PuffDragon•2/19/25, 2:54 AM

is that possible?

MattIPv4•2/19/25, 2:54 AM

Yup, that's what DNS does