About Cloudflare DNS
Cloudflare is both a DNS provider and a CDN/security proxy. When managing DNS records, you will see a Proxy status toggle (orange cloud vs. gray cloud) that controls whether traffic passes through Cloudflare's network or goes directly to your server.
Before You Start
- Confirm you have admin/owner access to your domain registrar account.
- Get the target IP address (for A records) or CNAME hostname (for CNAME records) from your Orchid implementation consultant.
- Note your current DNS records before making changes — screenshot or write them down as a backup.
- If you use email on this domain (e.g., you@yourdomain.com), do not change MX records — only modify A and/or CNAME records as instructed.
- DNS changes can take 15 minutes to 48 hours to fully propagate worldwide.
Step-by-Step: Update A Record (Root Domain)
- Sign in to the Cloudflare Dashboard.
- Select your domain from the dashboard home.
- Click DNS in the left sidebar, then Records.
- Find the existing A record for your root domain (Name: @ or your domain name).
- Click Edit.
- Enter the IP address provided by Orchid in the IPv4 address field.
- Set Proxy status to DNS only (gray cloud). See note below about why.
- Click Save.
Step-by-Step: Update CNAME Record (www subdomain)
- On the DNS Records page, find or add a CNAME record for www.
- Set the Target to the hostname provided by Orchid.
- Set Proxy status to DNS only (gray cloud).
- Click Save.
Proxy Status: Orange Cloud vs. Gray Cloud
- Orange cloud (Proxied): Traffic routes through Cloudflare. Hides your origin IP. Enables WAF, caching, and DDoS protection. Cloudflare terminates TLS.
- Gray cloud (DNS Only): DNS resolves directly to your server IP. No Cloudflare protection or optimization.
For Orchid eCommerce, use DNS Only (gray cloud). Orchid manages its own SSL and CDN. Using Proxied mode can cause SSL negotiation errors because both Cloudflare and Orchid's infrastructure try to terminate TLS.
Important Cloudflare Notes
- Always use DNS Only (gray cloud) for records pointing to Orchid.
- Proxied records lock TTL to Auto (5 min). DNS Only records allow custom TTL.
- Domain verification CNAMEs (like TXT verification) must be DNS Only or they return Cloudflare IPs instead of the expected value.
TTL and Propagation
DNS Only records: TTL is customizable (1 min, 5 min, 1 hour, or Auto). Changes typically propagate within 5 minutes to 1 hour. Proxied records use a fixed 5-minute TTL.
Verifying Your DNS Changes
After saving your records, verify propagation:
- Open a terminal or command prompt.
- Run:
nslookup yourdomain.com(replace with your actual domain). - Confirm the returned IP address matches the one provided by Orchid.
- Alternatively, use an online tool like whatsmydns.net to check global propagation.
If your domain still shows the old site after 48 hours, clear your browser cache, try an incognito window, or contact your Orchid consultant.