Convert full setup to partial setup

If you initially configured a full setup, you can later convert your zone to use a partial setup (also known as CNAME setup).

A partial setup allows you to use Cloudflare's reverse proxy on individual subdomains while using a different authoritative DNS provider.

Before you begin

Make sure you consider the following:

• It will not be possible to use Cloudflare's reverse proxy on the zone apex (example.com), only on subdomains.
• On the dashboard, you will only be able to create A, AAAA, and CNAME records, which are the DNS record types that can be proxied.
• You should plan for SSL/TLS certificates. If you are only using Universal SSL prior to converting your zone, a certificate will be provisioned for your subdomains only after each of the respective DNS records are proxied. If your domain is sensitive to downtime, instead of using Universal SSL, consider using an advanced certificate with delegated DCV.

1. Prepare DNS records

1. Export a zone file

   Dashboard

   To export records using the dashboard:

   1. In the Cloudflare dashboard, go to the DNS Records page.

      Go to Records

   2. Select Import and Export.

   3. Select Export.

   API

   To export records using the API, send a GET request.

   Required API token permissions

   At least one of the following token permissions is required:

   • DNS Read
   • DNS Write

   Export DNS Records

   curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/dns_records/export" \
     --request GET \
     --header "Authorization: Bearer $CLOUDFLARE_API_TOKEN"

2. Import the zone file into your new primary DNS provider.

3. Create or update your records so that you have CNAME records pointing to {your-hostname}.cdn.cloudflare.net for every hostname you wish to proxy through Cloudflare.

   Example CNAME record at authoritative DNS provider

   The CNAME record for www.example.com would be:

   www.example.com CNAME www.example.com.cdn.cloudflare.net

4. Remove any previously existing A, AAAA, or CNAME records referencing the hostnames you want to proxy through Cloudflare. For these hostnames, leave only the records pointing to {your-hostname}.cdn.cloudflare.net.

5. Confirm you have the correct record for every subdomain that should be proxied through Cloudflare.

2. Convert the zone

Dashboard

1. On the Cloudflare dashboard, go to the zone's Overview page.
2. Select Convert to CNAME DNS Setup and then Convert to confirm.
3. Save the information from the Verification TXT Record. If you lose the information, you can also access it on the DNS Records ↗ page, under Verification TXT Record.

API

1. Use the Edit Zone endpoint with type set to partial to convert the zone type.
2. Take note of the value returned under verification_key in the API response. This will be used in the next step.

3. Verify ownership

Add the Verification TXT Record at your authoritative DNS provider. Cloudflare will verify the TXT record and send a confirmation email. This can take up to a few hours.

Example verification record

A verification record for example.com might be:

Type	Name	Content
TXT	cloudflare-verify.example.com	966215192-518620144

Note

If your authoritative DNS provider automatically appends DNS record name fields with your domain, make sure to only insert cloudflare-verify as the record name. Otherwise, it may result in an incorrect record name, such as cloudflare-verify.example.com.example.com.

After creating the record, you can use this Dig Web Interface link ↗ to search (dig) for cloudflare-verify.<YOUR DOMAIN> and validate if it is working.

The verification record must remain in place for as long as your domain is active on the partial setup on Cloudflare.

If your organization has multiple Cloudflare accounts, also consider using zone holds to have more control over domain ownership.

4. Update your nameservers

Once verification is complete, update the nameservers at your domain registrar to point to your new authoritative DNS provider. Make sure to remove the Cloudflare nameservers.