ClueDNS knowledge path

Cloudflare, with the boundaries labeled

Provider-specific instructions are dated, sourced from official documentation, and kept separate from portable DNS concepts.

Verified 2026-07-28 ยท availability-impacting

Onboard a domain to Cloudflare nameservers

Inventory records, sequence DNSSEC safely, replace parent delegation, verify web and email, and preserve a tested rollback path.

Proxied or DNS-only

Understand when Cloudflare answers with its edge addresses and when DNS exposes the configured origin.

DNSSEC sequencing

Coordinate DS and DNSKEY state so a provider move does not leave validating resolvers with a bogus chain.

DNS, TLS, HTTP, and origin

Keep each layer separate when a hostname resolves but a proxied application still fails.