导航|地址|刷新
Setup
图
Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/dns/llms.txt
Use this file to discover all available pages before exploring further.



DocsDirectoryAPISDKsChangelog

Search

Log in






DNS

/




Overview

Get started

Concepts


DNS setups


Overview


Primary setup (Full)


About

Setup

Troubleshooting






CNAME setup (Partial)


About

Setup

DNS resolution






DNS Zone transfers


Overview


Cloudflare as Primary


About

Setup

DNSSEC options

Records transfer






Cloudflare as Secondary


About

Setup

Proxy traffic

DNSSEC options

Alerts






Access Control Lists (ACLs)


About

Cloudflare IP addresses

Create ACL





Troubleshooting






Subdomain setup


About


Setup


Overview

Parent zone on full setup

Parent zone on partial setup





Enable DNSSEC

Migrate to new account

Rollback






Reference


Records quick scan

Zone status






Troubleshooting


Cannot add domain

Delete all DNS records

Domain deleted from Cloudflare

Zone stuck in Pending Nameserver Update






Setup conversions


Full to partial

Full to secondary

Partial to full

Partial to secondary

Secondary to full

Secondary to partial





Zone removal






Foundation DNS


Overview

Advanced nameservers

Setup

DNSSEC keys






Nameservers


About

Update nameservers

Nameserver options

Advanced nameservers ↗


Custom nameservers


Overview

Zone level

Account level

Tenant level










DNS records


Overview


How to


Manage DNS records

Create zone apex record

Create subdomain records

Set up email records

Import and export records

Batch record changes

Dynamically update DNS records

Round-robin DNS

Delegate subdomains






Reference


DNS record types

Time to Live (TTL)

Record attributes

Wildcard DNS records

Shadowed records

Vendor-specific DNS records






Troubleshooting


Records with the same name

Unexpected DNS records

Exposed IP addresses

Verify a domain with CNAME

NS records already exist

Stale response










Proxy status


Overview

Use cases

Limitations

Enforce DNS-only






DNSSEC


Overview


Multi-signer DNSSEC


About

Setup





DNSSEC states

Migration tutorial

NSEC3 support

Validation and keys

Troubleshooting






CNAME flattening


About

Setup

Example diagram






Additional options


Zone defaults

Analytics and logs

Reverse zones and PTR records






Private originsBeta


Overview

Set up a private origin via Cloudflare WAN

Private network routing

Troubleshooting






Internal DNS


Overview

Get started


Internal zones


Overview

Manage internal zones

Internal DNS records

Reference zones





Views

Connectivity

Analytics and logs






DNS Firewall


Overview

Setup

Analytics and logs

FAQ


Random prefix attack mitigation


Overview

About

Setup










Reference


Analytics API propertiesLegacy

Recommended third-party tools

Features and plans

Migrate DNS from BIND ↗

Domain Connect

Analytics MCP serverMCP






Troubleshooting


Full resources list

General DNS issues

DNS_PROBE_FINISHED_NXDOMAIN

DNS_PROBE_POSSIBLE

Email issues

Debug endpoints





FAQ

Changelog

Glossary


Agent resources


Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

DNS llms.txt ↗

DNS llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗













Home

/DNS

/…
DNS setups


/Subdomain setup

/Setup



Setup


Last updated Apr 29, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewAvailable setupsHow toSSL/TLS certificatesAccess applications





Availability


Subdomain setup is only available for Enterprise accounts. If you only want to create a subdomain for your site in Cloudflare, refer to Create a subdomain record.



Subdomain setup relies on a process known as delegation. When, in a parent domain such as example.com, an NS record ↗ is created for a subdomain blog.example.com, this means that DNS management for the subdomain can be done separately, in its own A portion of the DNS namespace that is managed by a specific organization or administrator.
" class="glossary-tooltip" tabindex="0" data-astro-cid-hklyqugd>DNS zone .
flowchart TD accTitle: Example of parent zone and subdomains A[<code>example.com</code>] --> B[<code>docs.example.com</code>] A[<code>example.com</code>] --> C[<code>blog.example.com</code>] subgraph Parent domain A end subgraph Subdomains B C end
------


Available setups


When configuring a subdomain setup, its availability will depend on both the parent zone setup and the setup used for the child zone. A child zone holds DNS management for a delegated subdomain.


Parent zoneChild zoneAvailable
Full or SecondaryFullYes
Full or SecondarySecondaryYes
Full or SecondaryPartialNo
PartialFullYes
PartialSecondaryYes
PartialPartialYes




Subdomain zones in partial setup are not delegated


Subdomains using a CNAME setup (partial) represent an exception in the sense that delegation does not apply in this context. As explained in the dedicated CNAME setup (Partial) section, this setup is intended to simply proxy individual subdomains through Cloudflare. For completeness, however, this is listed as an option in this table and the how-to guide has detailed explanation on how to achieve a subdomain zone using a CNAME setup (partial).



This table assumes zones that are in an active status. For example, if you need to add the parent zone to Cloudflare when its child zone already exists in a CNAME setup (partial), you can convert the parent zone to a CNAME setup (partial) while it is still in pending status.

------


How to


Refer to the following guides to learn how to configure a subdomain setup depending on the setup used for the parent zone:

Parent zone on full setup

Parent zone on partial setup

Although the how-to guides in this documentation are focused on both parent domains and subdomains existing in Cloudflare, it is also possible to achieve a subdomain setup in Cloudflare while the parent domain exists in a different DNS provider.

------


SSL/TLS certificates


When using subdomain setup, you should consider possible interactions between parent zone and child zone configurations that could impact SSL/TLS certificates provisioning.

If a certificate is already active on the child zone for a specific hostname (subdomain.example.com), any certificate pack containing that exact hostname in the parent zone (example.com) will fail validation.


Access applications


To use subdomain setups with Cloudflare Access, note that:


If the child zone is in a pending state when you create the Access application, your configuration will not automatically apply when you activate the zone. You must also re-save the Access application once your subdomain setup is active.



If you split out a subdomain which already has an Access application, you will also need to re-save the Access application to associate it with the new child zone.



PreviousAboutNextParent zone on full setup


Was this helpful?

YesNo

Edit pageReport issue




On this page

Overview

Available setups

How to

SSL/TLS certificates

Access applications


Edit pageReport issue














Getting started
PlansContact salesPartnersFind a partnerStartupsUnder attack?Domain name search


Company
AboutCareersInvestorsPressPress kitGlobal network




Public interest
Project GalileoAthenian ProjectCloudflare for CampaignsProject FairshotImpact/ESG


Compliance
Compliance resourcesTrust HubData ProtectionResponsible AITransparency reportReport abuse




Resources
App innovation reportCloudflare RadarCase studiesStatusSupportEventsBlog


Developers
DocumentationLearning centerCommunity




Solutions
SSE and SASE platformCloudflare AI CloudAI SecurityFrontend Development PlatformMulti-Tenant Platform DevelopmentWeb Security Platform


Start BuildingLog In












© 2026 Cloudflare, Inc.

Privacy policy|Report security issues|Terms of use|Trademark
|
Your privacy choices








Docs




------
导航页 打开网址