Cloudflare Secondary DNS
Authoritative zone Cloudflare serves from AXFR/IXFR transfers with a primary DNS provider.
- Provider
- cloudflare
- Kind
- DNS
- Category
- Edge
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| anycast | boolean | — | no | false | ▸ true |
| geoRouting | boolean | — | no | false | inherited |
| healthChecked | boolean | — | no | false | inherited |
| incrementalTransfer | boolean | — | no | false | inherited |
| managed | boolean | — | no | true | ▸ true |
| redundantProviders | boolean | — | no | false | ▸ true |
| transferDirection | enum | incoming | outgoing | no | incoming | inherited |
| tsigAuthentication | boolean | — | no | false | inherited |
| ttlSeconds | integer | — | no | — | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
shared-dependency-without-redundancy
The design requires redundant discovery, but this DNS or coordination service, which everything depends on, runs on a single provider or a single replica. Its failure is the whole system's failure.
- — all of these hold:
- — the design requirement `availability.discoveryRedundant` is true
- — any of these hold:
- — the node's `redundantProviders` is false
- — the node's `replicated` is false
nodes:
- { id: "secondary-dns", component: "cloudflare-secondary-dns" }Alibaba Cloud DNSalibaba-dnsAlibaba Cloud Domain Namesalibaba-domainsAlibaba Cloud DNS PrivateZonealibaba-private-zoneAmazon Application Recovery Controller (ARC)aws-application-recovery-controllerAmazon Route 53 Global Resolveraws-route53-global-resolverAmazon Route 53 Resolver endpointaws-route53-resolverAmazon Route 53route53Azure DNSazure-dnsAzure DNS Private Resolverazure-dns-private-resolverAzure Private DNSazure-private-dnsAzure Traffic Managerazure-traffic-managerCloudflare DNScloudflare-dnsCloudflare Internal DNScloudflare-internal-dnsCloudflare Registrarcloudflare-registrarBIND 9bindCoreDNScorednsGeneric DNSdnsDNSdns-resolverdnsmasqdnsmasqExternalDNSexternal-dnsKnot DNSknot-dnsIBM NS1 Connectns1Pi-holepi-holePowerDNS Authoritative ServerpowerdnsUnboundunboundDigitalOcean DNSdigitalocean-dnsGoogle Cloud DNSgoogle-cloud-dnsCloud Domainsgoogle-cloud-domainsIBM Cloud DNS Servicesibm-dns-servicesDNS Private Zoneoci-dns-private-zoneDNS Public Zoneoci-dns-zoneTraffic Management Steering Policyoci-traffic-managementOpenStack Designateopenstack-designate
# yaml-language-server: $schema=../../schema/component.schema.json # Cloudflare Secondary DNS: Cloudflare serves a zone it pulls from a primary provider. # "Zone transfers": incoming AXFR/IXFR transfers, one TSIG shared secret per peer, Enterprise only. schemaVersion: "1" type: "component" id: "cloudflare-secondary-dns" kind: "dns" provider: "cloudflare" docs: "https://developers.cloudflare.com/dns/zone-setups/zone-transfers/" defaults: managed: true anycast: true redundantProviders: true properties: transferDirection: type: "enum" values: ["incoming", "outgoing"] default: "incoming" incrementalTransfer: type: "boolean" default: false tsigAuthentication: type: "boolean" default: false