Cloudflare certs with Azure DNS record management

[ozz0191]

Im trying to delegate apex domain (mydomain com) from Cloudflare to Azure DNS, similar to how I can delegate a subdomain. I want to use Cloudflare’s certificate service while managing DNS records in Azure DNS.

I have a domain in Cloudflare (mydomain com) and an Azure DNS zone with the same name (mydomain.com). Im trying to create an Azure Function App with a custom domain (func.mydomain com). When I try to delegate the apex domain (@) from Cloudflare to Azure DNS by setting the NS records in Cloudflare to point to Azure DNS, the Azure Function App fails to validate the custom domain.

However, when I create a subdomain in Cloudflare (azure.mydomain com), delegate that to Azure DNS by setting its NS records to Azure DNS, and then create the Azure Function App with a custom domain of func.azure.mydomain.com, it works. But I want the app to be accessible via func.mydomain com, not func.azure.mydomain com.

I am aware that I could add the TXT and CNAME records in Cloudflare, but I want to use Azure DNS for managing DNS records.

Hope this makes any sense.
Thanks in advance!

[sandro]

Are you on a Business plan? If not, you can certainly move the domain over to Microsoft, however this will deactivate the domain on Cloudflare and you won’t be able to issue Origin certificates any more either. Plus, once you stop proxying an Origin certificate will become a bit pointless as it is not trusted by browsers.

Bottom line, unless you use one of the more complex setups, you will have to use Cloudflare DNS and proxied entries, to use Origin certificates.

Once you move your domain to another provider, Cloudflare won’t be really involved any more.