DNS Integration for Cloudflare®

Empower your experience with simplified DNS synchronization, enhanced website security, effortless subdomain creation, and smoother workflows. Use Cloudflare CDN that distributes content around the world to speed up websites.

Key features

• Import DNS records to Plesk from Cloudflare.
• Export DNS records from Plesk to Cloudflare, both manually and automatically.
• Creating a subdomain in Plesk automatically imports its DNS records to Cloudflare.
• Automate DNS challende for Let's Encrypt Wildcard SSL in case DNS zone is on Cloudflare.
• Enable & disable proxy mode in Plesk to proxy DNS records via Cloudflare.

Known limitations

• Domains with nonexistent TLDs (for example, example.tld) cannot be exported to Cloudflare (because of the Cloudflare API limitations).
• Subdomains with standalone DNS zones cannot be exported to Cloudflare (because of the Cloudflare API limitations). By default, DNS records for subdomains in Plesk are created in the parent domain's DNS zone. Such records can be exported.
• Domain aliases cannot be exported to Cloudflare.
• IDN domains are not supported (because of the Cloudflare API limitations).
• Cloudflare caches the DNS zone of a removed domain. If you try to create the same domain in Plesk and export it to Cloudflare, the export will fail with the "Code: 400 Message: Bad Request: Record already exists" warning. To flush DNS cache and export the domain, you need to export it again.
• TLSA is not supported at the moment.
• It is possible to export no more than 50 domains at once (because of the Cloudflare API limitations).

Specifics of importing from Cloudflare to Plesk

• Records unsupported by Plesk (CERT, HTTPS, LOC, NAPTR, SMIME, URI, SVCB, SSHFP) will not be imported to Plesk.
• NS records in Plesk are replaced with the NS records of a Cloudflare server.
• All records except NS records are removed from Plesk.
• All supported records are imported from Cloudflare to Plesk.
• Custom records in Plesk will be lost.
• Records in Plesk will match those in Cloudflare (except for unsupported ones).
• After a successful import, auto-sync will be enabled by default, and will become active after five minutes. To change the default value (300 sec), add the following lines to the panel.ini file:

[ext-cloudflaredns]
autoSyncDisableTtl = 300

Specifics of exporting from Plesk to Cloudflare

• The extension will create a DNS zone in Cloudflare if it did not exist.
• Unsupported records (CERT, HTTPS, LOC, NAPTR, SMIME, URI, SVCB, SSHFP) will remain in Cloudflare.
• All other records will be removed from Cloudflare.
• All records including NS are exported to Cloudflare.
• Records in Cloudflare will match those in Plesk (except for NS records and unsupported records).
• After a successful export, auto-sync will be enabled by default and will become active immediately.

To hide and disable auto-sync, add the following lines to the panel.ini file:

[ext-cloudflaredns]
autoSyncEnable = 0|false

Showing all domains on a Plesk server to the Plesk administrator

• By default, Plesk filters domains on a server so that the Plesk administator can see only their domains.
• To show all domains that exist on the server, add the following lines to the panel.ini file:

[ext-cloudflaredns]
adminDomainFilters = 1|true

Description of the defaultProxiedEnabledTypes Field (Default CDN-Enabled Record Types):

• You can specify the types of DNS records that will always have CDN (Content Delivery Network) enabled using the defaultProxiedEnabledTypes setting. To do so, you need to add lines of the following pattern to the panel.ini file. You can specify multiple DNS record types by separating them with commas, for example:

[ext-cloudflaredns]
defaultProxiedEnabledTypes = A, AAAA, CNAME

• Now CDN will be automatically enabled for all A, AAAA, and CNAME DNS records every time DNS records are created or updated.
• The default value of this setting is an empty string, meaning that no record types will have CDN enabled. Currently, this setting only takes A, AAAA, and CNAME record types as arguments, other record types are ignored.

Description of the defaultSyncableDnsRecordTypes Field:

By default, the extension syncs all DNS record types except NS from Plesk to Cloudflare. To change this behavior, add "NS" to defaultSyncableDnsRecordTypes setting in panel.ini file. You can specify multiple types by separating them with commas. Specifying an empty value disables the filter (same as listing all possible record types):

[ext-cloudflaredns]
defaultSyncableDnsRecordTypes = A, AAAA, CNAME, MX, PTR, TXT, SRV, AXFR, DS, CAA

• Now the extension will automatically synchronize all A, AAAA, and CNAME DNS records. Other DNS records will not be synchronized.

Description of the cloudflareDomainRemovalEnabled Field:

• By default, whenever a domain is removed from Plesk, a corresponding DNS zone remains in Cloudflare. If you want the extension to remove the DNS zone in Cloudflare as well, add the following cloudflareDomainRemovalEnabled setting to the panel.ini file:

  [ext-cloudflaredns]
  cloudflareDomainRemovalEnabled = 1|true

• Now the extension will automatically remove a corresponding DNS zone from Cloudflare whenever a domain is removed from Plesk.

Cloudflare, the Cloudflare logo, and Cloudflare Workers are trademarks and/or registered trademarks of Cloudflare, Inc. in the United States and other jurisdictions.

1.0.8 (07 November 2025)

• [+] Added information on import from Cloudflare that auto-sync has a 5 minute delay before it starts. (EXTPLESK-5633)
• [*] Updated the extension to be fully compatible with PHP 8.4.

1.0.7 (17 October 2025)

• [*] Security improvements.

1.0.6 (28 May 2025)

• [*] Updated the instructions for getting Cloudflare tokens when the domain hosting owner and the Cloudflare DNS zone administrator (who issues the token) are different users.

1.0.5 (19 November 2024)

• [-] Importing DNS records no longer fails with the "Incorrect DNS Record parameter values were specified" error if a TXT record contains one or more double quote (") characters. (EXTPLESK-5352)

1.0.4 (29 July 2024)

• [*] Security improvements.

1.0.3 (19 June 2024)

• [*] Security improvements.

1.0.2 (26 October 2023)

• [+] Added the ability to remove a domain from Cloudflare when removing it from Plesk. (EXTPLESK-5077)
• [+] Added the option to enable/disable export of NS records from Plesk to Cloudflare. (EXTPLESK-4177)

1.0.1 (16 October 2023)

• [-] Importing DNS records no longer fails if there is no information about name servers in the Cloudflare account's DNS zone. (EXTPLESK-5087)

1.0.0 (10 October 2023)

• [+] Initial production ready release.
• [+] Import DNS records to Plesk from Cloudflare.
• [+] Export DNS records from Plesk to Cloudflare.
• [+] Enable/disable proxy mode in Plesk to start using Cloudflare CDN per DNS record.
• [+] Manage customers' domains under an administrator account if needed.
• [+] Customize the type of DNS records to be managed/synced by the extension.

0.10.0 (12 September 2023)

• [*] Internal improvements.

0.9.4 (11 September 2023)

• [+] Added the ability to enable and disable default types of DNS records for synchronization with Cloudflare.
• [+] Now you can see export and import results without having to reload the page.
• [*] Improved stability.

0.9.3 (28 June 2023)

• [+] Added the ability to enable and disable the CDN in the DNS records of a domain.

0.9.2 (22 May 2023)

• [-] An active domain is no longer unintentionally disabled while importing it to Cloudflare from Plesk with enabled proxy mode. (EXTPLESK-4472)

0.9.1 (9 May 2023)

• [+] A Plesk administrator can now view all domains on the server by adding the new adminDomainFilters parameter to the panel.ini file. (EXTPLESK-4471)

0.9.0 (13 March 2023)

• [+] Initial beta release.