---
title: Cloudflare
description: Add Figure's DNS records in Cloudflare, with the proxy turned off.
---

{% callout type="warning" title="Turn off the proxy for every Figure record" %}
Set **Proxy status** to **DNS only** (the grey cloud). With the orange cloud on, Cloudflare answers for your subdomain itself, which stops Figure from issuing and renewing your certificates and interferes with our monitoring. Figure already protects this traffic; see [Security & infrastructure](/security-and-infrastructure).
{% /callout %}

## Your records

Enter your production domain to fill in the values. Cloudflare calls the fields **Name** and **Target**.

{% dns-records provider="cloudflare" /%}

## Add the records

{% steps %}
{% step title="Open your domain's DNS records" %}
Sign in to the {% provider-link provider="cloudflare" %}Cloudflare dashboard{% /provider-link %}, select the account and domain, then go to **DNS** › **Records**.
{% /step %}
{% step title="Add a CNAME record" %}
Select **Add record** and fill in:

- **Type:** `CNAME`
- **Name:** the name from the table, such as `loans` or `test.loans`
- **Target:** the value from the table
- **Proxy status:** **DNS only**
- **TTL:** Auto

Then select **Save**.
{% /step %}
{% step title="Repeat for the other record" %}
Add both the test and production records. When you're done, the list should show two `CNAME` records with grey clouds.
{% /step %}
{% step title="Check your work" %}
Use **Check records** above, or the full checker on [Domains & DNS](/partner-onboarding/domain-configuration#domain-checker), then let Figure know.
{% /step %}
{% /steps %}

## Common issues

- **The record already exists.** Edit it to point at Figure instead of adding a second one.
- **The checker says it points to an IP address.** The record is still proxied. Switch it to **DNS only**.
- **You use Cloudflare for SaaS or a partial (CNAME) setup.** Add the records wherever your authoritative DNS lives, and make sure they aren't proxied.