Guide Web hosting

I manage my DNS at Cloudflare: which records and SSL setting do I need?

Your website on our webhosting with DNS at Cloudflare: which A, MX and TXT records you need, why the mail record must be DNS only and which SSL mode to choose.

By Hermie Updated

Do you manage your domain's DNS at Cloudflare? Then you need these records and this setting:

  • an A and AAAA record to the IP address of your hosting;
  • the record for mail set to DNS only (grey cloud);
  • an MX record to mail.yourdomain.com with priority 10, and an SPF record;
  • SSL/TLS mode Full (strict).

Rather not set it up yourself? Invite us to your Cloudflare account and we'll take care of it.

Where to find the right values

The right values are in DirectAdmin:

  1. Log in to DirectAdmin via the link in your welcome email, or go to my.planetnode.net, open your webhosting product and click the login button.
  2. Go to DNS Management and choose your domain.
  3. Here you'll find the A, AAAA, MX and TXT records as our server expects them. Copy them to Cloudflare.

The records in Cloudflare

  1. Create an A record for your domain (@) and for www pointing to your hosting's IPv4 address. If your hosting also has an IPv6 address, create an AAAA record too.
  2. Create an A record for mail pointing to the IP address from DirectAdmin. Set this record to DNS only (grey cloud). If it's set to Proxied (orange cloud), your email won't work.
  3. Create an MX record for your domain pointing to mail.yourdomain.com, with priority 10.
  4. Create a TXT record with your SPF rule. It starts with v=spf1 and ends with -all.

Tip

Also add your DKIM and DMARC records in Cloudflare. How to copy them is explained in My email goes to spam or is rejected: SPF, DKIM and DMARC.

SSL/TLS: choose Full (strict)

  1. In Cloudflare, go to SSL/TLS.
  2. Choose the mode Full (strict).

Not Flexible

With Flexible, Cloudflare talks to our server without encryption. WordPress then keeps redirecting to https, and your site gets stuck in a redirect loop.

For Full (strict), your domain needs a valid certificate on our server. See How can I install SSL certificates for my domain?

Let us set it up

Rather not do it yourself? Invite PlanetNode as a member of your Cloudflare account with the DNS role. We'll then set the records up for you. Ask through a ticket which address to invite.

Did this article help you?

Did not find what you were looking for?

Open a ticket and our team will look into it with you. For a quick question, Discord works too.

Open a ticket Go to Discord