stuck CNAME, need staff help, not a config issue.

[george.georgefrench]

What is the name of the domain?

cylax-sys.com

What is the error number?

No specific error number; issue is DNS stuck propagation

What is the error message?

No error message shown in DNS queries; CNAME never appears, only SOA record with TTL 1800 seconds

What is the issue you’re encountering

The DNS CNAME record for cylax-sys.com is stuck and does not propagate to any public DNS resolver. The SOA TTL stays fixed at 1800 seconds and resets repeatedly without any user or API changes, preventing the domain from resolving properly. The domain only resolves locally and via localhost but is unreachable via the public domain

What steps have you taken to resolve the issue?

Stopped all cloudflared tunnel processes and services.

Verified no cronjobs, scripts, or automated tools are modifying DNS.

Flushed local and system DNS caches multiple times.

Verified no proxy (orange cloud) enabled on CNAME record; it is DNS only (gray cloud).

Checked DNS from multiple public resolvers (1.1.1.1, 8.8.8.8, 9.9.9.9, OpenDNS).

Waited over an hour for TTL to count down; TTL resets repeatedly to 1800 seconds.

Checked Cloudflare audit logs; no changes recorded after initial setup.

What feature, service or problem is this related to?

DNS records

What are the steps to reproduce the issue?

Configure a Cloudflare Tunnel with DNS record set to CNAME on a domain.

Change DNS records to DNS only (disable proxy).

Observe that CNAME never propagates and SOA TTL resets indefinitely.

[sjr]

The record needs to be proxied as it’s for a tunnel. As it is for your apex domain (and will be proxied anyway) you won’t see the underlying CNAME, only Cloudflare proxy A/AAAA records returned when queried.

Cloudflare tunnels resolve to local IPv6 addresses inside Cloudflare so when you don’t proxy this record, only AAAA records can be found (due to the CNAME flattening) which is what is confusing you to think the record doesn’t work.
https://cf.sjr.dev/tools/check?3ac885824d344ad094c2a9d12b29b3cb#dns

dig +short cylax-sys.com a
(no answer)
dig +short cylax-sys.com aaaa
fd10:aec2:5dae::