Automatic proxy of A reccords

What is the name of the domain?

hawesome.com

What is the issue you’re encountering

One of my A records became proxied, when that feature had been turned off previously.

What steps have you taken to resolve the issue?

I disabled the proxy feature of the specific A record that should not be proxied.

What feature, service or problem is this related to?

DNS records

What are the steps to reproduce the issue?

I’m not entirely sure how to duplicate the problem as the record in question was not proxied previously. It was only after I’d troubleshot the services at both ends that I discovered that the record was being proxied.

Cloudflare doesn’t automatically turn on proxy. Only two things can effect that which I’m aware of, which is if the website was Paused in Cloudflare and then unpaused (overview level option, disables proxy on all records), or the record itself was changed to be proxied. If you’re saying it suddenly changed, you could check Audit Logs Review audit logs | Cloudflare Fundamentals docs to see what/who proxied it. You can filter to a specific domain and the action of unproxying/proxying shows as just generic “Update”, which can be expanded and it’ll show you the full record details/who did it/via which interface.

2 Likes

To start off, thank you for your assistance in this, you’ve already provided me with far more information about the Cloudflare interface than I had before.

What you’ve described is exactly the behavior that I expect. However, that’s not been my experience over the last 24 hours.

I see in the Audit Logs that the A Record in question had the proxy feature turned on at 1am (local time) this morning. Then turned off 6pm local time.

Prior to that, the only log entry related to that specific record is when I turned the feature off almost a month ago.

There are no other authorized users of my account, and I do not see log on/off data in these logs. Are those details stored in another area?

Yea if you expand it you can see the New Value with the proxied field

.

I would look at “User IP Address” and “Interface”. Is the IP of the audit log where it was turned on same as your normal one? Is the Interface “UI” or “API”?

2 Likes

Thank you! That’s the exact detail I was missing.

It looks like when I setup Dynamic DNS on my firewall, I configured it to enable to Proxy feature automatically.

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.