[▲ Vercel Community](/) · [Categories](/categories) · [Latest](/latest) · [Top](/top) · [Live](/live) [Help](/c/help/9) # Cloudflare Proxy Issue 356 views · 5 likes · 16 posts Xalkan (@xalkan) · 2024-08-19 Hi, All of a sudden, my domain shows an invalid config:  But I have these already:   When I disable the proxy, the invalid config goes away, but I need the proxy. How can I solve this issue? Thanks! Pauline P. Narvas (@pawlean) · 2024-08-20 Hi, @xalkan! We have docs on our integrations with Cloudflare. From the docs: > Set the Proxy status to DNS only. This ensures DNS queries result in Vercel serving the request instead of Cloudflare. https://vercel.com/docs/integrations/external-platforms/cloudflare#using-cloudflare-as-a-reverse-proxy Xalkan (@xalkan) · 2024-08-20 Thank you @pawlean! I followed the instructions to use Cloudflare as a reverse proxy, but it does not work. It was working fine before, so I don't know what happened. DNS only is not sufficient since I need some proxy features. What can I try? Amy Egan (@amyegan) · 2024-08-20 · ♥ 2 Does it work if you set Cloudflare SSL mode to [Full](https://developers.cloudflare.com/ssl/origin-configuration/ssl-modes/full) as recommended in the documentation Pauline linked? Xalkan (@xalkan) · 2024-08-20 Hi @amyegan, no, it does not work. I followed all the steps, including having Full SSL mode, but the "Invalid Configuration" error persists Amy Egan (@amyegan) · 2024-08-20 I see `Valid Configuration` for `tyron.io` right now. Do you currently have Cloudflare proxy enabled? Xalkan (@xalkan) · 2024-08-20 No, at the moment, it is disabled since it was not working... But I need to enable the proxy ASAP. Testnet.tyron.io has the proxy enabled but it says Invalid Configuration. Amy Egan (@amyegan) · 2024-08-20 · ♥ 1 Looks like there isn't a CNAME record for that subdomain: https://dnschecker.org/#CNAME/testnet.tyron.io Xalkan (@xalkan) · 2024-08-21 That's very weird because I do have it there:  And it shows up but not everywhere:  Then, when I change it to DNS Only, it propagates to all countries in the DNS Checker. Amy Egan (@amyegan) · 2024-08-21 Cloudflare provided some tips for CNAME verification: https://developers.cloudflare.com/dns/manage-dns-records/troubleshooting/cname-domain-verification/ There's also a Vercel guide that covers this topic in more detail: https://vercel.com/guides/can-i-use-a-proxy-on-top-of-my-vercel-deployment Xalkan (@xalkan) · 2024-08-21 Hi Amy, Thank you for your help. Unfortunately, enabling the Proxy is necessary for IPv6, which the client requires. Do you know when Vercel will support IPv6? The guidelines you provided don't offer a solution for this specific situation. I'm not sure what else to try. Thanks. Xalkan (@xalkan) · 2024-08-21 I got in contact with Cloudflare support and they said this is a Vercel issue… Tyron.io's A record shows ok at https://dnschecker.org/#A/tyron.io even when proxied, tho:  Amy Egan (@amyegan) · 2024-08-21 When proxy is enabled and the settings page shows `Invalid Configuration`, does the domain take you to the correct site? Amy Egan (@amyegan) · 2024-08-21 You should check your Cloudflare logs to see if any requests are being blocked if you haven't done that already. Please also make sure the HTTP verification path (`http://<YOUR_DOMAIN>/.well-known/acme-challenge/*`) isn't modified by page rules, bot protection, geo-blocking or any other Cloudflare features. You can find more details about that in the troubleshooting section here: https://vercel.com/docs/integrations/external-platforms/cloudflare#troubleshooting Xalkan (@xalkan) · 2024-08-21 hi Amy.. Yes, even with the Invalid Config warning, the domain still works. But the API Route that I need fails. All rules seem fine. This was working fine just a few days ago and then it stopped suddenly. Xalkan (@xalkan) · 2024-08-24 · ♥ 2 The issue was fixed by disabling the Under Attack Mode on Cloudflare. Thank you @amyegan and @pawlean for your help!
