Skip to content
Docs

Cloudflare

Add Figure's DNS records in Cloudflare, with the proxy turned off.

View as Markdown
On this page· 3 sections

Turn off the proxy for every Figure record

Set Proxy status to DNS only (the grey cloud). With the orange cloud on, Cloudflare answers for your subdomain itself, which stops Figure from issuing and renewing your certificates and interferes with our monitoring. Figure already protects this traffic; see Security & infrastructure.

Your records#

Enter your production domain to fill in the values. Cloudflare calls the fields Name and Target.

https://
Open Cloudflare

Example records· Enter your domain above to fill in your own

Test environmenttest.loans.partnerbank.com

Product site
Nametest.loans
Targetpartners.test.figure.com

Productionloans.partnerbank.com

Product site
Nameloans
Targetpartners.figure.com

Name values are relative to partnerbank.com. If your provider wants the full hostname, use the one shown for each environment instead. Copy each value exactly. Don’t substitute IP addresses, A records, or other Figure hostnames.

Add the records#

  1. Open your domain's DNS records

    Sign in to the Cloudflare dashboard, select the account and domain, then go to DNS › Records.

  2. Add a CNAME record

    Select Add record and fill in:

    • Type: CNAME
    • Name: the name from the table, such as loans or test.loans
    • Target: the value from the table
    • Proxy status: DNS only
    • TTL: Auto

    Then select Save.

  3. Repeat for the other record

    Add both the test and production records. When you're done, the list should show two CNAME records with grey clouds.

  4. Check your work

    Use Check records above, or the full checker on Domains & DNS, then let Figure know.

Common issues#

  • The record already exists. Edit it to point at Figure instead of adding a second one.
  • The checker says it points to an IP address. The record is still proxied. Switch it to DNS only.
  • You use Cloudflare for SaaS or a partial (CNAME) setup. Add the records wherever your authoritative DNS lives, and make sure they aren't proxied.