Reconcile Cloudflare's onboarding scan with the authoritative DNS inventory
Pattern-based discovery can miss unusual hostnames and custom DKIM selectors.
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 15 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,594 articlesNetworks & Infrastructure
Coordinate other certificate issuers before delegating Cloudflare DCV
The validation CNAME becomes a continuing authority path, not a disposable one-time proof.
Read the guide
Confirm cross-provider DNSKEY support before planning a Cloudflare DNSSEC-preserving migration
Keeping validation active requires cooperation from the previous provider, not only a nameserver change.
Read the guide
Verify a Cloudflare CNAME proof at the authoritative provider, not only in the dashboard
Proxying, flattening, or a child delegation can hide the exact alias a third party expects.
Read the guide
Preserve Cloudflare proxy and record attributes when moving DNS through a zone file
A BIND-format import can carry configuration beyond the visible address values.
Read the guide
Do not treat a Cloudflare DNS batch transaction as atomic global propagation
A successful database transaction can still reach the distributed DNS layer record by record.
Read the guide
Find Cloudflare records shadowed by a subdomain delegation before editing their values
A record can remain visible in the parent zone while another nameserver set is authoritative for it.
Read the guide
Separate Cloudflare record TTL from nameserver delegation TTL during a DNS change
Changing one caching interval does not necessarily shorten every layer of the lookup path.
Read the guide
Do not delete a Cloudflare Total TLS certificate as a routine renewal reset
Deletion can opt that hostname out of future automatic Total TLS orders.
Read the guide
Check connection-bound Windows authentication before proxying an intranet through Cloudflare
NTLM and Kerberos assumptions can cause repeated prompts when requests do not retain one origin connection.
Read the guide