CloudFlare

Are There Sub-Domains That Shouldn’t Be Enabled with CloudFlare?

While CloudFlare provides excellent security and performance benefits for most sub-domains, there are certain cases where enabling CloudFlare might not be suitable. These include sub-domains used for non-HTTP services, sensitive configurations, or specialized applications. Here’s what you need to know:

Sub-Domains You Should Avoid Enabling on CloudFlare

The following types of sub-domains may not benefit from being proxied through CloudFlare:

1. Email Sub-Domains

Sub-domains like mail.yourdomain.com or smtp.yourdomain.com are used for email services, such as sending or receiving mail. CloudFlare only proxies HTTP/HTTPS traffic, and enabling these sub-domains could interfere with email delivery.

  • Solution: Set these sub-domains to DNS Only in your CloudFlare dashboard.

2. FTP Sub-Domains

Sub-domains like ftp.yourdomain.com are used for file transfers via FTP. Since CloudFlare doesn’t support FTP traffic, enabling proxying for FTP sub-domains can block access.

  • Solution: Set the FTP sub-domain to DNS Only.

3. cPanel or Webmail Sub-Domains

Sub-domains such as cpanel.yourdomain.com or webmail.yourdomain.com are used to access hosting control panels or webmail. Proxied traffic can cause login or functionality issues for these services.

  • Solution: Set these sub-domains to DNS Only.

4. API Endpoints

Sub-domains hosting APIs (e.g., api.yourdomain.com) may experience issues with caching or rate limiting when proxied through CloudFlare.

  • Solution: Use DNS Only for API sub-domains or configure appropriate caching rules in CloudFlare.

5. Database Connections

Sub-domains used for database connections, such as db.yourdomain.com, should not be proxied. Databases operate on non-HTTP protocols that are incompatible with CloudFlare.

  • Solution: Set these sub-domains to DNS Only.

How to Disable Proxying for Specific Sub-Domains

To ensure specific sub-domains are not proxied by CloudFlare, follow these steps:

  1. Log in to CloudFlare: Access your account via the CloudFlare Dashboard.
  2. Navigate to DNS Settings: Select your domain and go to the DNS tab.
  3. Locate the Sub-Domain: Find the sub-domain you want to adjust.
  4. Disable Proxying: Click the orange cloud icon next to the sub-domain to set it to DNS Only.

When Should You Enable Proxying for Sub-Domains?

Sub-domains used for websites, blogs, or other HTTP/HTTPS services can benefit significantly from CloudFlare’s features, including:

  • Improved performance via caching and CDN.
  • Enhanced security with DDoS protection and SSL.
  • Access to traffic analytics and optimization tools.

Need Help Configuring Your Sub-Domains?

If you’re unsure which sub-domains should or shouldn’t be proxied through CloudFlare, contact our support team via the CustomerPanel. We’ll help you configure your settings for optimal performance and functionality.

Knowledgebase