Subdomain Not Picking Assigned External A Record IP

[xfantacyxxx]

Hi Guys,

My subdomain is not picking the external IP i have assigned it.
Confirm with screenshots below.

I would want the subdomain dns to pick the IP assigned to it on cloudlfare dns settings.

[xfantacyxxx]

When I pause Cloudflare and dns management defaults to namecheap, it immedietely propagates correctly.

[xfantacyxxx]

same as primary domain

anyone with ideas?

[sandro]

Why does a DNS lookup on my domain not return the IP address I configured?

This tutorial explains why, when doing a DNS lookup on your domain, you may see IP addresses that are different to those you specified in your DNS records. What are the addresses I see? The addresses you see will likely begin 104. and/or 172. and they are Cloudflare’s IP addresses. Why do I see these addresses and not the IP that I set? If you have Cloudflare proxying your site, i.e. you have the DNS record set to , then because the record is proxied, Cloudflare’s IP will show instea…

[xfantacyxxx]

This has helped… Thanks.

What can I do about it?
You shouldn’t need to do anything if you want your site to be proxied by Cloudflare, it should continue to function but with Cloudflare’s security and performance benefits. You can set the record to which will disable these features and the Cloudflare proxy and will then show the IP address you configured.

[sandro]

I’d also suggest you check your encryption mode, as you current appear to have an insecure selection.

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…

[xfantacyxxx]

It is set to Full.

[sandro]

Precisely, that’s insecure.

[xfantacyxxx]

So I should do Full (Strict)?

[sandro]

The article has all on that.

[KianNH]

Yes - Full trusts any self-signed certificate which any bad actor could get.

Full (Strict) requires a origin CA certificate (from your Cloudflare dashboard) or a trusted certificate that is valid for your domain name.