Preface#
Starting from November 2021, CloudFlare has disabled the zone_set API used by Partners to prevent abuse (because this API does not require domain ownership verification). The method of implementing CNAME access through Partners is almost coming to an end, and only the ServerShield by Cloudflare plugin subscription in Plesk space can still be accessed normally. Several months have passed, and the official website has not provided any explanation on how Partners can access new domains in the future.
Missing the era of Partners, CloudFlare for SaaS also provides a more flexible CNAME access method, but there are also some shortcomings, but it's not unusable.
Preparation#
1) An idle domain name that can be added to the Cloudflare Dashboard normally (if you don't want to be despised by the mobile, don't use eu.org)
2) The domain name you want to access, requires NS not in Cloudflare
// When both of the above domain names are in Cloudflare, selecting an IP will result in Error 1000
3) A foreign credit card (for verification, it's actually free, a virtual card will also work)
Tutorial#
First, click according to the picture, and you should be asked to fill in your credit card information. There is no charge for this process, so please feel free to use it.
Take out your idle domain name, fill in the name randomly, and write your origin server in the target of the resolution (configure the fallback source).
Go back to Cloudflare For SaaS and add the fallback source that was just configured.
Then click on the custom hostname above, enter the domain name you want to CNAME access, and it is recommended to select 1.1 for TLS.
Then go to your DNS service provider and first resolve the domain name you want to CNAME access to your fallback source, and then resolve the following content.
Note: Domestic resolution providers are not as considerate as CF, please change _acme-challenge.prefix.yourdomain.suffix to _acme-challenge.prefix, otherwise the resolved result will be _acme-challenge.prefix.yourdomain.suffix.yourdomain.suffix and it will be incorrect. Alibaba Cloud seems to have a prompt now.
Then click refresh until it looks like this, and it's done.
In theory, it should be completed at this step. Now you can change the resolution record of the domain name you want to access to other Cloudflare IPs by any means, as long as the traffic can reach Cloudflare.
Open the domain name you want to access and you will find that CNAME access to Cloudflare CDN implemented by Cloudflare for SaaS has been completed.
That's all~
This article is synchronized and updated to xLog by Mix Space
The original link is https://blog.nekorua.com/posts/technology/34.html