I manage my DNS at Cloudflare: which records and SSL setting do I need?
Your website on our webhosting with DNS at Cloudflare: which A, MX and TXT records you need, why the mail record must be DNS only and which SSL mode to choose.
By Hermie Updated
Do you manage your domain's DNS at Cloudflare? Then you need these records and this setting:
- an A and AAAA record to the IP address of your hosting;
- the record for
mailset to DNS only (grey cloud); - an MX record to
mail.yourdomain.comwith priority 10, and an SPF record; - SSL/TLS mode Full (strict).
Rather not set it up yourself? Invite us to your Cloudflare account and we'll take care of it.
Where to find the right values
The right values are in DirectAdmin:
- Log in to DirectAdmin via the link in your welcome email, or go to my.planetnode.net, open your webhosting product and click the login button.
- Go to DNS Management and choose your domain.
- Here you'll find the A, AAAA, MX and TXT records as our server expects them. Copy them to Cloudflare.
The records in Cloudflare
- Create an A record for your domain (
@) and forwwwpointing to your hosting's IPv4 address. If your hosting also has an IPv6 address, create an AAAA record too. - Create an A record for
mailpointing to the IP address from DirectAdmin. Set this record to DNS only (grey cloud). If it's set to Proxied (orange cloud), your email won't work. - Create an MX record for your domain pointing to
mail.yourdomain.com, with priority10. - Create a TXT record with your SPF rule. It starts with
v=spf1and ends with-all.
Tip
Also add your DKIM and DMARC records in Cloudflare. How to copy them is explained in My email goes to spam or is rejected: SPF, DKIM and DMARC.
SSL/TLS: choose Full (strict)
- In Cloudflare, go to SSL/TLS.
- Choose the mode Full (strict).
Not Flexible
With Flexible, Cloudflare talks to our server without encryption. WordPress then keeps redirecting to https, and your site gets stuck in a redirect loop.
For Full (strict), your domain needs a valid certificate on our server. See How can I install SSL certificates for my domain?
Let us set it up
Rather not do it yourself? Invite PlanetNode as a member of your Cloudflare account with the DNS role. We'll then set the records up for you. Ask through a ticket which address to invite.
Did this article help you?
Related articles
My email goes to spam or is rejected: SPF, DKIM and DMARC
Does your email end up in spam or get rejected? Check SPF, DKIM and DMARC for your domain and keep the sending limit of 500 emails per day in mind.
How do I create and manage email accounts?
How to create email accounts, forwarders, autoresponders, and spam filters in DirectAdmin.
How can I create and manage MySQL databases?
How to create MySQL databases, manage users, and use phpMyAdmin in DirectAdmin.
I cannot reach my website, what now?
Read here how to solve problems when your website is no longer accessible.