Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DNS] Exposed DNS settings in dash #13149

Open
wants to merge 44 commits into
base: production
Choose a base branch
from

Conversation

RebeccaTamachiro
Copy link
Contributor

@RebeccaTamachiro RebeccaTamachiro commented Feb 26, 2024

PCX-9776
PCX-10635

@github-actions github-actions bot added product:dns Issues or PRs related to DNS pcx_team_review size/m labels Feb 26, 2024
content/dns/dnssec/multi-signer-dnssec/setup.md Outdated Show resolved Hide resolved
{{</tab>}}
{{<tab label="api" no-code="true">}}

1. Use the [Edit DNSSEC Status endpoint](/api/operations/dnssec-edit-dnssec-status) to enable DNSSEC and activate multi-signer DNSSEC for your zone. This is done by setting `status` to `active` and `dnssec_multi_signer` to `true`, as in the following example.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ [vale] reported by reviewdog 🐶
[cloudflare.UnclearAntecedent] Warning: Instead of 'This is', try starting this sentence with a specific subject and verb.

Copy link

cloudflare-pages bot commented Feb 26, 2024

Deploying cloudflare-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: fa0e72c
Status: ✅  Deploy successful!
Preview URL: https://3a0abfc4.cloudflare-docs-7ou.pages.dev
Branch Preview URL: https://rebecca-dns-expose-settings.cloudflare-docs-7ou.pages.dev

View logs

Copy link

github-actions bot commented Feb 26, 2024

Files with changes (up to 15)

Original Link Updated Link
https://developers.cloudflare.com/dns/nameservers/custom-nameservers/account-custom-nameservers/ https://rebecca-dns-expose-settings.cloudflare-docs-7ou.pages.dev/dns/nameservers/custom-nameservers/account-custom-nameservers/
https://developers.cloudflare.com/dns/dnssec/multi-signer-dnssec/setup/ https://rebecca-dns-expose-settings.cloudflare-docs-7ou.pages.dev/dns/dnssec/multi-signer-dnssec/setup/
https://developers.cloudflare.com/dns/manage-dns-records/reference/dns-record-types/ https://rebecca-dns-expose-settings.cloudflare-docs-7ou.pages.dev/dns/manage-dns-records/reference/dns-record-types/
https://developers.cloudflare.com/dns/additional-options/dns-zone-defaults/ https://rebecca-dns-expose-settings.cloudflare-docs-7ou.pages.dev/dns/additional-options/dns-zone-defaults/
https://developers.cloudflare.com/dns/nameservers/nameserver-options/ https://rebecca-dns-expose-settings.cloudflare-docs-7ou.pages.dev/dns/nameservers/nameserver-options/
https://developers.cloudflare.com/dns/nameservers/custom-nameservers/zone-custom-nameservers/ https://rebecca-dns-expose-settings.cloudflare-docs-7ou.pages.dev/dns/nameservers/custom-nameservers/zone-custom-nameservers/
https://developers.cloudflare.com/dns/zone-setups/zone-transfers/cloudflare-as-primary/setup/ https://rebecca-dns-expose-settings.cloudflare-docs-7ou.pages.dev/dns/zone-setups/zone-transfers/cloudflare-as-primary/setup/
https://developers.cloudflare.com/dns/additional-options/reverse-zones/ https://rebecca-dns-expose-settings.cloudflare-docs-7ou.pages.dev/dns/additional-options/reverse-zones/
https://developers.cloudflare.com/dns/nameservers/ https://rebecca-dns-expose-settings.cloudflare-docs-7ou.pages.dev/dns/nameservers/
https://developers.cloudflare.com/dns/nameservers/custom-nameservers/tenant-custom-nameservers/ https://rebecca-dns-expose-settings.cloudflare-docs-7ou.pages.dev/dns/nameservers/custom-nameservers/tenant-custom-nameservers/
https://developers.cloudflare.com/dns/zone-setups/reference/nameserver-assignment/ https://rebecca-dns-expose-settings.cloudflare-docs-7ou.pages.dev/dns/zone-setups/reference/nameserver-assignment/

## Remove account custom nameservers
2. Update the registrar of the domain (or domains) that provide the ACNS names. This step depends on whether you are using [Cloudflare Registrar](/registrar/):

* If you are using Cloudflare Registrar for the domain that provides the ACNS names, [contact Cloudflare Support](/support/contacting-cloudflare-support/) to add glue records to your ACNS and update your nameservers.
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is updating nameservers actually necessary at this point (for the domain that provides ACNS names)? Or have we mixed it up with step needed for the zone that will ultimately be assigned an ACNS?

2. Make sure `A/AAAA` records with the assigned IPv4 and IPv6 exist at the authoritative DNS of the domain that provides the ACNS names.

* If your domains use [Cloudflare Registrar](/registrar/), the respective `A` and `AAAA` records are automatically created.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cloudflare DNS, not Registrar.

{{</example>}}

3. Update the registrar of the domain that provides the ACNS names. This step depends on whether you are using [Cloudflare Registrar](/registrar/):

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cloudflare Registrar doesn't yet add glue records based on Custom Nameservers setup within Cloudflare.

{{<tab label="api" no-code="true">}}

* If you are using [Cloudflare Registrar](/registrar/), use the [Set ACNS Related Zone Metadata endpoint](/api/operations/account-level-custom-nameservers-usage-for-a-zone-set-account-custom-nameserver-related-zone-metadata) to change the `enabled` parameter to `false`.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

And then contact Cloudflare Support. (like you mentioned above)


The next step depends on whether you are using [Cloudflare Registrar](/registrar/) for your domain:

- If you are using Cloudflare Registrar for your domain, no further action is required. Glue records will be added automatically on your behalf.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Don't believe this is true.

@RebeccaTamachiro RebeccaTamachiro marked this pull request as ready for review June 6, 2024 11:00
@RebeccaTamachiro RebeccaTamachiro requested a review from a team as a code owner June 6, 2024 11:00
While there are default values for DNS settings that Cloudflare applies to all new zones, Enterprise accounts have the option to configure their own DNS zone defaults according to their preference.

{{<Aside type="warning">}}
DNS zone defaults are only applied at the moment a new zone is created and will not impact already existing zones. Any of the values specified as default can later be adjusted on the respective **DNS > Settings** or **DNS** > **Records** for each zone.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
DNS zone defaults are only applied at the moment a new zone is created and will not impact already existing zones. Any of the values specified as default can later be adjusted on the respective **DNS > Settings** or **DNS** > **Records** for each zone.
DNS zone defaults are only applied at the moment a new zone is created and will not impact already existing zones. Any of the values specified as default can later be adjusted on the respective **DNS** > **Settings** or **DNS** > **Records** for each zone.

Nit: Are both locations at the zone level or just the second one?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Both are at the zone level

content/dns/additional-options/dns-zone-defaults.md Outdated Show resolved Hide resolved
content/dns/additional-options/dns-zone-defaults.md Outdated Show resolved Hide resolved
content/dns/dnssec/multi-signer-dnssec/setup.md Outdated Show resolved Hide resolved
content/dns/dnssec/multi-signer-dnssec/setup.md Outdated Show resolved Hide resolved
content/dns/nameservers/nameserver-options.md Outdated Show resolved Hide resolved
content/dns/nameservers/nameserver-options.md Outdated Show resolved Hide resolved
content/dns/nameservers/nameserver-options.md Outdated Show resolved Hide resolved
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants