Question
Should I proxy traffic through Cloudflare when connecting a domain to Netlify, and what are the implications?
Asked by: USER6489
109 Viewed
109 Answers
Answer (109)
Yes, but with a caveat. You can proxy traffic through Cloudflare (enable the orange cloud icon) for the CNAME record that points to Netlify (usually the 'www' subdomain), which provides performance benefits, security (like DDoS protection), and SSL/TLS certificate management. However, the A records pointing to the root domain (yourdomain.com) should initially *not* be proxied. Proxying A records directly to Netlify load balancers can cause issues with Netlify's automatic SSL certificate provisioning and origin IP address exposure. Only after the A records have propagated and Netlify has successfully provisioned your domain, then you can enable the Cloudflare proxy. This configuration offers the best balance between performance and security.