CNAME proxy record strange behavior

[technical25]

I am trying to set up a website on github pages and the webiste does not load (firefox on desktop browser reports too many redirects, curl returns 301). I think the problem is related to the CNAME DNS entry.

I have the domain mydomain.net on cloudflare (I should note that the domain was just transferred to cloudflare, but it has been more than 24 hours now and at least some DNS changes I am making on cloudflare seem to be taking effect). I have setup A records for domain.net correctly (as per github pages instructions)

dig mydomain.net +nostats +nocomments +nocmd
;mydomain.net. IN A
mydomain.net. 0 IN A 185.199.109.153
mydomain.net. 0 IN A 185.199.110.153
mydomain.net. 0 IN A 185.199.108.153
mydomain.net. 0 IN A 185.199.111.153

I have then created CNAME record for www.mydomain.net to point to mydomain.github.io. But even though mydomain.github.io is set up like this

dig mydomain.github.io +nostats +nocomments +nocmd
;mydomain.github.io. IN A
mydomain.github.io. 0 IN A 185.199.110.153
mydomain.github.io. 0 IN A 185.199.108.153
mydomain.github.io. 0 IN A 185.199.111.153
mydomain.github.io. 0 IN A 185.199.109.153

www.mydomain.net is returning something completely different from the dig command

dig www.mydomain.net +nostats +nocomments +nocmd
;www.mydomain.net. IN A
www.mydomain.net. 0 IN A 172.67.165.192
www.mydomain.net. 0 IN A 104.21.89.231

Can someone shed some light why this is, or some more diagnostics I can run to resolve the issue?

Thanks

[sandro]

Do you want to use the proxy? If so, The site is not working. Load cannot follow more than 20 redirections - #4 by sandro

If not, unproxy the entries.

[technical25]

Changing to Full Strict resolved the problem. I don’t really understand why, but thanks

[sandro]

It is because you previously had the insecure legacy mode Flexible selected, which disabled encryption and started a request loop.