Skip to content

Conversation

@allixsenos
Copy link
Contributor

Cloudflare API silently ignores/discards the CNAME flattening setting when proxy is enabled, which leads to confusing behavior and drift.

Even worse, the CNAME flattening setting isn't set, so dnscontrol continuously sees drift and tries to re-apply the setting.

Per DNSControl Opinion 6 ("if it is ambiguous in DNS, it is forbidden in DNSControl"), we now reject configurations that set both modifiers on the same record.

Cloudflare API silently ignores/discards the CNAME flattening setting when proxy is enabled, which leads to confusing behavior and drift.

Even worse, the CNAME flattening setting isn't set, so dnscontrol continuously sees drift and tries to re-apply the setting.

Per DNSControl Opinion 6 ("if it is ambiguous in DNS, it is forbidden in DNSControl"), we now reject configurations that set both modifiers on the same record.
@tlimoncelli
Copy link
Collaborator

Smart! Yes, I agree that making them mutually exclusive is for the best.

(and you get extra credit for citing the Opinion list :-) )

@tlimoncelli tlimoncelli changed the title CLOUDFLAREAPI: Reject CF_CNAME_FLATTEN_ON with CF_PROXY_ON CLOUDFLAREAPI: Reduce confusion by making CF_CNAME_FLATTEN_ON and CF_PROXY_ON mutually exclusive Jan 28, 2026
@tlimoncelli tlimoncelli merged commit 5400286 into StackExchange:main Jan 28, 2026
2 checks passed
@allixsenos allixsenos deleted the fix/cname-flatten-proxy-mutual-exclusion branch January 28, 2026 17:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants