Apex domain set to DNS only, can I add proxied CNAME?

[Luhmann]

What is the name of the domain?

Shashwati Talukdar

What is the error number?

n/a

What is the error message?

n/a

What is the issue you’re encountering

setting cname not working

What steps have you taken to resolve the issue?

writing this post

What feature, service or problem is this related to?

DNS records

What are the steps to reproduce the issue?

I have successfully pointed my wife’s apex domain shashwati.com to https://carrd.co/ and it is working fine. However, she has a blog hosted on blot.im and I would like blog.shashwati.com to point there. The settings are set as per the instructions on that site, but it is not resolving correctly. I assume (perhaps wrongly) that this is because the apex domain is not proxied and the settings for subdomains are being handled by carrd.co rather than cloudflare? Or should it still be able to work as intended? Thanks.

Screenshot of the error

[DarkDeviL]

Make sure that your SSL/TLS encryption mode is set to Full (Strict):

→ https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls

Once this is done, can you please attach a screenshot of what you see on the following page?

→ https://blot.im/settings/domain

[Luhmann]

Thanks. I made the recommended change, but so far it is still not working. I will try again later.

[DarkDeviL]

“Last checked a few seconds ago”, … did you click on “[Revalidate domain]” to trigger that?

Do you have anything under “Redirect Rules”?:

→ https://dash.cloudflare.com/?to=/:account/:zone/rules/redirect-rules

[Luhmann]

did you click on “[Revalidate domain]” to trigger that?

Yes. Just did again, with the same result.

Do you have anything under “Redirect Rules”?:

Nothing.

[DarkDeviL]

Can you run a trace, and post the result?

→ https://dash.cloudflare.com/?to=/:account/trace/search

URL: https://blog.shashwati.com
HTTP Method: GET

[Luhmann]

{"trace":[{"step_name":"set_furl","type":"page_rule","matched":true,"zoneName":"shashwati.com"},{"step_name":"set_furl_isperm","type":"page_rule","matched":true,"zoneName":"shashwati.com"},{"step_name":"file_upload_scan","type":"product","matched":false,"public_name":"Uploaded Content Scanning","zoneName":"shashwati.com"},{"step_name":"api_shield","type":"product","matched":false,"public_name":"API Shield","zoneName":"shashwati.com"},{"step_name":"http_request_firewall_managed","type":"phase","matched":false,"public_name":"WAF Managed Rules","trace":[{"step_name":"77454fe2d30c4220b5701f6fdfb893ba","type":"ruleset","matched":false,"description":"Created by the Cloudflare security team, this ruleset is designed to provide protection for free zones","name":"Cloudflare Managed Free Ruleset","kind":"managed"}],"zoneName":"shashwati.com"},{"step_name":"request_managed_headers","type":"product","matched":false,"managed_headers":[{"id":"add_client_certificate_headers","enabled":false},{"id":"add_visitor_location_headers","enabled":false},{"id":"remove_visitor_ip_headers","enabled":false}],"zoneName":"shashwati.com"},{"type":"cloud_connector","matched":false,"public_name":"Cloud Connector","zoneName":"shashwati.com"},{"step_name":"response_managed_headers","type":"product","matched":false,"managed_headers":[{"id":"remove_x-powered-by_header","enabled":false},{"id":"add_security_headers","enabled":false}],"zoneName":"shashwati.com"}],"status_code":301}

[DarkDeviL]

What do you have under “Page Rules”?

→ https://dash.cloudflare.com/?to=/:account/:zone/rules

[Luhmann]

Ah. That was the issue. There was a redirect rule which I have now deleted. That should fix it. Thanks so much!

[Luhmann]

Just to be clear, for the record:

There was nothing under “redirect rules” but there was a redirect rule under “page rules.” (These are separate pages in the settings.)

Thanks so much to @DarkDeviL for sticking with this till the problem was found.

As of this writing there is still some problem with blot.im recognizing that the issue has been fixed - I even tried using a different subdomain to work around any legacy 301 redirect caching issue. However, this seems like something that should be fixed on blot’s side and no longer an issue with Cloudflare. Manually typing the URL into my browser window currently brings me to a page which says:

“You have successfully pointed your domain to Blot’s server.
The DNS records you created are working.
You still need to enter your domain on the dashboard. Blot must know which site to show here. Please update the domain settings page on your site’s dashboard.”

So this issue can be considered closed.