DNS Tab
This is a tab where we can manage all of our DNS records related to website.
1) DNS management - Here are the DNS records of website listed. The DNS records that have orange cloud means that it is proxified. Every request that is made passes through cloudflare.
2) Cloudflare nameservers - We have nameservers listed here that is assigned to our domain so that domain passes all traffic through it. Cloudflare sits in between domain and hosting. This is the essential step that is to be done when setting up a site on cloudflare.
3) Custom Nameservers - This can be only used if we have business plan
Custom nameservers allow you to create your own, unique nameservers in place of your assigned Cloudflare nameservers. To switch to using custom nameservers, first create them here, then add them as glue records at your registrar. I don't think custom nameservers will going to benefit us.
4) DNSSEC - It stands for Domain name system security extensions. It provide a way to authenticate DNS response data. Before we connect to a website, browser has to retrieve the IP address of the site using DNS. However, it is possible for an attacker to intercept DNS queries and provide false information that would cause browser to connect to a fake website where we could potentially provide personal information (for example, what you think is a bank website). DNSSEC provides a level of additional security where the web browser can check to make sure the DNS information is correct and was not modified.
NOTE - This feature is free and provide more security to website.
I am going to enable this feature on our test website ( https://inboundmarketingpros.com/ )
Setting up DNSSEC on our website -
Step 1 : Enabe DNSSEC
Step 2 : It will popup a form with all information needed that we have to add to our domain server. Our domain is on namecheap so I have followed the steps from this article → https://www.namecheap.com/support/knowledgebase/article.aspx/9722/2232/managing-dnssec-for-domains-pointed-to-custom-dns/
We can get all info how to setup this option on various registrars→ https://support.cloudflare.com/hc/en-us/articles/360006660072
FINAL STEP - So after everything is setup we get a success message as shown in screenshot below
Further we can test whether DNSSEC is enabled on our site or not -> https://gf.dev/dnssec-test
5) CNAME Flattening
With CNAME Flattening, Cloudflare will follow a CNAME to where it points and return that IP address instead of the CNAME record itself. We have "Flatten CNAME at root" option selected in free version. We can change this option in pro plans. We don't have to do anything with this option.
CONCLUSION - There are two differences between free and pro version
1) Custom Nameservers - It can only be used with business plan.
2) CNAME Flattening - We can change an option in select box in pro plan. Default option suggested by cloudflare to be used is "Flatten CNAME at root".