Using Cloudflare with SolumeCore: DNS Only (Grey Cloud)
Set up Cloudflare with your SolumeCore hosting, game server or app: why records must be DNS only and how to switch the orange cloud to grey in seconds.
You can keep your domain's DNS at Cloudflare and connect it to SolumeCore, but every record that points to a SolumeCore service must be set to DNS only (the grey cloud). With the orange cloud on, traffic goes through Cloudflare's proxy and, for a SolumeCore hosting, email and SSL do not work; for an app, the certificate cannot be issued; for a game server, the proxy is not built for game connections. This guide shows how to set it up and fix it.
Why the cloud must be grey
Cloudflare offers two modes for each record:
- Proxied (orange cloud): visitors connect to Cloudflare, which forwards the traffic to your server. It is designed for web traffic.
- DNS only (grey cloud): Cloudflare just answers the DNS question and visitors connect straight to your service.
SolumeCore needs to reach your domain directly to verify it and to issue the HTTPS certificate, and games and email do not travel through a web proxy. The dashboard warns you when it detects it:
- In Domains, the DNS column shows Orange cloud and the domain is counted as need attention. Its detail panel says: switch it to "DNS only" so the certificate can be issued.
- In a web hosting, the DNS health checks show that the orange cloud is on and ask you to switch it to DNS only.
Switch a record to DNS only
- Sign in to Cloudflare and select your domain.
- Open DNS, then Records.
- Find the record and click the orange cloud in the Proxy status column. It turns grey and says DNS only.
- Save, and repeat for every record that points to SolumeCore.
- In the SolumeCore dashboard, run the check again and wait a few minutes for the state to become Active.
Connect each service with Cloudflare
Web hosting
- Open your hosting, go to Domain & DNS and click Connect my domain (or DNS guide if you already have a domain).
- Choose Keep your DNS where it is. The wizard lists the records to create:
Afor@,www,cpanel,webmailandmail, plus theMXand SPFTXTrecords. - Create them in Cloudflare with DNS only. Instead of creating them one by one, click Download zone file in the wizard and import it in Cloudflare, under DNS, Records, Import and export.
- Back in the DNS guide wizard, in the Verify step, click Check now.
The wizard warns it too: with the orange cloud on, email and SSL will not work. See Point a domain to your web hosting.
Game server
Create the records the Your own domain wizard shows, and keep the cloud grey on every record. Cloudflare's proxy is built for web traffic, not for game connections, and the CNAME on _minecraft._tcp has to be resolved directly. Details in Use your own domain for a game server.
App or bot
Create the CNAME (or A at the root) and the TXT verification record with DNS only. If the domain stays in Waiting for DNS and shows the Cloudflare warning, switch it to grey. See Connect a domain to your app.
VPS
For a VPS, how you configure Cloudflare is up to you. Start with DNS only until the site works, and only then turn the proxy on if you want it for a website. Only web traffic goes through the proxy; SSH and game connections keep needing DNS only records. See Point a domain to your VPS.
Troubleshooting
The domain stays in "Waiting for DNS" with the orange cloud on
The dashboard detects the proxy and cannot verify the records. Switch them to DNS only and wait a few minutes.
Email does not arrive or is rejected
The mail records (mail, MX and SPF) must be DNS only. The MX and TXT records cannot be proxied, but the A record for mail can be set to proxied by mistake.
The certificate is not valid after the change
The certificate is issued once the DNS points straight to the service. Wait a few minutes, run the check again and see How to check DNS propagation.
I want Cloudflare's protection for my website
For a website on a VPS, you can turn the proxy on after the site works. For SolumeCore web hosting, apps and game servers, keep DNS only. The protection that comes with SolumeCore servers is explained in Firewall and DDoS protection.
FAQ
Do I have to use Cloudflare?
No. You can use any registrar or DNS provider. Cloudflare is just one option.
Can I keep the orange cloud on only for the website of my hosting?
The dashboard asks for DNS only on the records that point to SolumeCore. With the proxy on, the HTTPS certificate and email may fail, so keep them grey.
Should I move my nameservers to SolumeCore instead?
For a web hosting, it is the recommended method and gives you the zone editor in the dashboard. Keep Cloudflare if you rely on it for other things.
Can the dashboard configure Cloudflare for me?
If your DNS provider supports Domain Connect and has our template, a Set up automatically button appears. See Set up your domain automatically with Domain Connect.
Related articles
- Connect a domain to a SolumeCore service
- Point a domain to your web hosting
- Use your own domain for a game server
- How to check DNS propagation
Looking for hosting for your domain? Take a look at SolumeCore web hosting.