Cloudflare Secondary DNS

cloudflareDNScloudflare-secondary-dns

Authoritative zone Cloudflare serves from AXFR/IXFR transfers with a primary DNS provider.

Provider
cloudflare
Kind
DNS
Category
Edge
Properties · 3 set by this component
propertytypevaluesrequiredkind defaultthis component
anycastboolean—nofalse▸ true
geoRoutingboolean—nofalseinherited
healthCheckedboolean—nofalseinherited
incrementalTransfer · component propertyboolean—nofalseinherited
managedboolean—notrue▸ true
redundantProvidersboolean—nofalse▸ true
transferDirection · component propertyenumincoming | outgoingnoincominginherited
tsigAuthentication · component propertyboolean—nofalseinherited
ttlSecondsinteger—no—inherited
Rules that apply · 1

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

shared-dependency-without-redundancy

The design requires redundant discovery, but this DNS or coordination service, which everything depends on, runs on a single provider or a single replica. Its failure is the whole system's failure.

  • — all of these hold:
  • — the design requirement `availability.discoveryRedundant` is true
  • — any of these hold:
  • — the node's `redundantProviders` is false
  • — the node's `replicated` is false
Use it in a design
nodes:
  - { id: "secondary-dns", component: "cloudflare-secondary-dns" }
Other DNS products · 33
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# Cloudflare Secondary DNS: Cloudflare serves a zone it pulls from a primary provider.
# "Zone transfers": incoming AXFR/IXFR transfers, one TSIG shared secret per peer, Enterprise only.
schemaVersion: "1"
type: "component"
id: "cloudflare-secondary-dns"
kind: "dns"
provider: "cloudflare"
docs: "https://developers.cloudflare.com/dns/zone-setups/zone-transfers/"
defaults:
  managed: true
  anycast: true
  redundantProviders: true
properties:
  transferDirection:
    type: "enum"
    values: ["incoming", "outgoing"]
    default: "incoming"
  incrementalTransfer:
    type: "boolean"
    default: false
  tsigAuthentication:
    type: "boolean"
    default: false

The same page as markdown, for an agent: /catalogue/components/cloudflare-secondary-dns.md