Skip to main content

How to Add a Primary Domain or Subdomain in Cloudflare?

I. Prerequisites

Before you start, make sure you have:

  • A domain name (e.g., example.com)
  • A registered and logged-in Cloudflare account
  • Your domain already added to Cloudflare (NS records pointed to Cloudflare)

II. Access the DNS Management Interface

  1. Log in to Cloudflare
  2. Select your domain
  3. Click DNS in the top menu
  4. Go to the Records page

III. Add DNS Records

Add the following records one by one using the parameters provided by your email service provider (uSpeedo).


1. Add SPF Record (TXT)

Used to specify which servers are allowed to send emails on behalf of your domain.

  • Type: TXT
  • Name: @ (or your domain)
  • Content: v=spf1 include:xxx ~all
  • TTL: Auto

2. Add DKIM Record (CNAME)

Used for email signature verification and improved deliverability.

  • Type: CNAME
  • Name: xxx._domainkey
  • Target: xxx.uspeedo.net
  • TTL: Auto

⚠️ Note:

  • Must be set to DNS Only (gray cloud)
  • Do not enable Cloudflare proxy (orange cloud)

3. Add DMARC Record (TXT)

Used to enforce email authentication policies.


4. Add MX Record (If You Need to Receive Emails)

If you also need to receive emails:

  • Type: MX
  • Name: @
  • Value: Mail server address
  • Priority: 10 (or as required by your provider)

IV. Important Configuration Notes

❗ 1. Disable Proxy (Critical) For these records:

  • MX
  • TXT (SPF / DMARC)
  • CNAME (DKIM)

👉 Must be set to: DNS Only (gray cloud)

Otherwise:

  • DNS will not resolve correctly
  • Email authentication will fail
  • Emails will go to spam

❗ 2. DNS Propagation Time

  • Typical: 5 minutes ~ 2 hours
  • Maximum: 24 ~ 48 hours

❗ 3. Incomplete Automatic DNS Scanning Cloudflare automatically scans existing records, but:

  • May miss MX / email records
  • Manual supplementation is required

V. Verify Domain Configuration

After completing DNS setup:

  1. Return to the uSpeedo Console
  2. Click Verify Domain
  3. Wait for the verification to pass

VI. FAQ

❓ Why does verification fail? Common causes:

  • DKIM not set to DNS Only
  • Incorrect SPF value
  • DNS not yet propagated
  • Wrong subdomain used

❓ Can I use a subdomain? Yes, recommended: mail.yourdomain.com

Benefits:

  • Does not affect root domain reputation
  • Easier to isolate sending traffic

❓ Does Cloudflare support CNAME? Yes, but:

  • Root domain (example.com) does not support CNAME
  • Subdomains can use CNAME

1. Use a Subdomain for Sending

Recommended:
- mail.xxx.com
- send.xxx.com

Not recommended:
- xxx.com (direct sending)

2. Separate by Purpose

Transactional emails:
- notify.xxx.com

Marketing emails:
- promo.xxx.com

3. Complete All Three Authentications

You must have all three:

  • SPF
  • DKIM
  • DMARC

Otherwise: 👉 Emails will easily end up in the spam folder


VIII. Summary

Complete these steps to send emails normally:

  • Add SPF / DKIM / DMARC
  • Disable proxy (DNS Only)
  • Wait for DNS propagation
  • Verify the domain in the platform