The www version
A separate address with its own record — and a complete bypass if you forget it.
3 minUpdated
your-site.com and www.your-site.com are two different addresses as far as DNS is concerned. Cutting the first over does not cut the second. If your www keeps pointing at your old server, every visitor typing it bypasses protection entirely — no firewall, no threat log, no rate limiting.
| Type | Name / Host | Value | TTL |
|---|---|---|---|
| CNAME | Your root domain, which already points at the proxy. Some panels require a trailing dot. | 300 |
Why a CNAME rather than an A record
A CNAME automatically follows your root domain: if our address ever changes, you have nothing to update. If your host refuses a CNAME on www, create an A record to the same address as the root instead.
Check the coverage
The www version coverage card, under Tools → Infrastructure, checks on demand that your www goes through the firewall and gives you the exact record to create if not. It does not run automatically: each check queries your server, and nobody wants that on every page load.
If your www has no DNS record at all, there is nothing to do: nobody can reach it, so nothing bypasses protection on that side.
This page did not answer your question?
Contact us