Key facts
- £45 an hour + VAT for setup
- Cloudflare free plan includes authoritative DNS
- Imported records checked against the current zone
- Two assigned Cloudflare nameservers set at your registrar
- Web records proxied, mail and non-web records DNS only
- SSL/TLS mode Full (strict) when the origin has a valid certificate
What changes when you move to Cloudflare
Moving to Cloudflare does not change who your domain is registered with, where your website is hosted, or who provides your email. It changes which nameservers answer for your domain. Once the switch is done, Cloudflare gives the answers, and you gain the option of sending web traffic through its proxy.
Cloudflare's free plan includes authoritative DNS, so for most small businesses the DNS itself costs nothing. The work is getting the move right. For background, read Cloudflare DNS explained.
Checking the record import
When you add a domain, Cloudflare scans for existing records and offers them as a starting zone. It is a useful head start, but the scan can only find records it can discover from outside. It commonly misses things such as DKIM keys under unusual selectors, verification records and less obvious subdomains.
So we take a full inventory from your current DNS provider and compare it with what Cloudflare imported, line by line. Missing records are added, stray ones queried, and TTLs lowered at the old provider beforehand where we have access. If DNSSEC is on at your registrar, the old DS record is removed first so the switch does not break resolution.
Proxy or DNS only, record by record
| Record | Setting | Reason |
|---|---|---|
Website apex and www | Proxied | Web traffic goes through Cloudflare and your server address is hidden |
| Mail server hostnames | DNS only | The proxy does not carry email |
| FTP, SSH, VPN, VoIP | DNS only | Not web traffic |
| Third-party platform CNAMEs | Usually DNS only | Many platforms need to see visitors directly or issue their own certificate |
MX, TXT and SRV records are never proxied; the proxy setting only applies to A, AAAA and CNAME records.
Nameservers and SSL
Cloudflare assigns your domain two nameservers. We set them at your registrar, replacing the old ones. If your domain is in the dijitul client portal we do this ourselves; if not, we tell you exactly what to enter. It can take up to 24 to 48 hours for the change to be seen everywhere, so the old and new zones must match during that time.
Once Cloudflare is answering, we set the SSL/TLS mode to Full (strict), provided your server has a valid certificate. That keeps traffic encrypted all the way and avoids the redirect loops Flexible mode often causes.
What we need from you
- Access to your current DNS provider, or permission to work from outside lookups if that login is lost.
- Access to the registrar, or a domain already in the dijitul client portal, so the nameservers can change.
- A list of the services tied to your domain: email provider, newsletter tool, booking system, phone system and anything else.
- Whether you want to own the Cloudflare account or have us hold the zone.
- Whether DNSSEC is on today. If you are not sure, we check.
With that in hand, the move is mostly careful checking. We confirm by email once Cloudflare is answering for your domain.
How dijitul helps
Cloudflare setup is £45 an hour + VAT, or a fixed quote if several domains are moving together. When it is done, you can manage the zone yourself or have us look after it through Cloudflare DNS management. Weighing it up first? Compare Cloudflare and registrar DNS, then contact us.
How it works and what it costs
Domains are priced live in the client portal. DNS management and 10 mailboxes are included with dijihost Complete Hosting at £1 a day + VAT. On their own, DNS and email set-up is £45 an hour + VAT or a fixed quote.
Tell us what you have
Your domains, who they are registered with, where your DNS and email live today, and what you want to change.
Plan the change
We list every DNS record and mailbox first, so nothing is forgotten, and agree a time to switch.
Make the switch
Transfers, nameserver changes, DNS records and mailbox moves, done carefully with low TTLs and a rollback plan.
Check it works
We test the website, email delivery, SPF, DKIM and DMARC from the outside before calling it done.
Look after it
Renewals, records and email stay looked after, and you can call a person when something changes.
Frequently asked questions
Do I need to move my domain to Cloudflare to use its DNS?
No. Your domain stays registered where it is. You only change the nameservers at your registrar to the two Cloudflare assigns. Your website hosting and email provider stay the same too, unless you choose to change them separately.
Does Cloudflare import my existing DNS records?
Cloudflare scans for existing records when you add a domain, but the scan can miss some, such as DKIM keys under unusual selectors or verification records. dijitul compares the import with a full inventory from your current provider before the nameservers change.
Is Cloudflare DNS free?
Cloudflare's free plan includes authoritative DNS, so most small businesses pay Cloudflare nothing for DNS. dijitul charges £45 an hour + VAT for the setup work: checking records, setting proxy options, changing nameservers and configuring SSL.
Which records should be proxied in Cloudflare?
Proxy the hostnames that serve your website, such as the apex and www. Mail server hostnames and anything that is not web traffic, such as FTP, SSH or VoIP, must be DNS only. Proxying a mail hostname stops email being delivered.
Will my site go down while moving to Cloudflare?
Not if the Cloudflare zone matches your current DNS before the nameservers change. Both give the same answers while the switch spreads, which can take up to 24 to 48 hours. If DNSSEC is on, the old DS record must be removed first.
Related
Get domains, DNS and email sorted
Set up properly, records checked, and real people to call. DNS and email are included with dijihost hosting.