Enhance - Cloudflare DNS Integration DNSSEC improvement - Enhance Control Panel

Enhance - Cloudflare DNS Integration DNSSEC improvement

Dataforge

I have enhance.com with cloudflare integration for a domain. I went in enhance control panel to the website, Domains, and there to enable DNSSEC
the text says You must set these records with your domain registrar for DNSSEC to be effective.
and gives several records to add
It's not clear here if it is adding these for me since i already have cloudflare integrated or not.
I checked on cloudflare and did not see the records added.
On cloudflare I went to DNS, Settings, and DNSSEC is not enabled by default. If you click to Enable, it then shows "How to enable DNSSEC"
It proceeds to give you a bunch of dns records to give to your registrar. The records look similar to the ones shown on enhance panel they wanted me to add, but they are not all the same.
So its not clear here what I should do. I can't change the records on either site, I can just click like confirm on cloudflare side. On enhance side it seems to have just done it as there is no save or cancel.
so I will just turn off dnssec on both sides until can know what to do exactly

thx

xyzulu

You need to enable DNSSEC at your domain registrar and domain DNS host. In your case I would suggest to do this via Cloudflare and your registrar. You are technically using Cloudflare for your DNS, not Enhance (though Enhance is pushing the records to the zones on Cloudflare).

That being said, while I have not tried it recently, in theory you can use the DNSSEC records Enhance gives you and then add them at your domain registrar as well. (I have not tested but would assume Enhance should push the records to your DNS zone on Cloudflare, but to check you may need to test or open a ticket) If you don't know how to monitor/check/test things like this though, you are best to learn first before blinding jumping in. DNSSEC is great, but you can cause big issues if you misconfigure it.

Dataforge

xyzulu I have not made the change at the registrar, I will check on that. But as I said, both the screens on enhanced.com and cloudflare when enabling dnssec they give a bunch of dns entries that should be set, and you can not change them on that screen, on both of them. You can confirm on cloudflare, thats it. Now, maybe you can change the dns setting manually after this. But again, the wording doesn't say this. How does the user know they should do this. Do they enter the settings the enhance panel gave, or do they enter the settings the clouldflare panel gave? Again, you are patronizing with your odd comments If you don't know how to monitor/check/test things like this though, you are best to learn first before blinding jumping in

mrEckendonk

xyzulu You need to enable DNSSEC at your domain registrar and domain DNS host. In your case I would suggest to do this via Cloudflare and your registrar. You are technically using Cloudflare for your DNS, not Enhance (though Enhance is pushing the records to the zones on Cloudflare).

Yep, noticed this week that a domain didn't updated changes in the DNS because we used for a domain the DNSSEC from Enhance and configured them to the domain register. That didn't work flawless and finally, that domain went offline..

I used the API of CloudFlare and thought it would be fine, but it wasn't.

Now I bumped into an issue, and had the DNSKEY manually set on the CloudFlare end. The Enhance API didn't like that and gave em an error until I removed the DNSKEY from CloudFlare.

The DNSKEY show in Enhance is not yet implented to sync with CloudFlare.

twest

Dataforge not to be patronizing, but this is the 3rd time you referred to enhance as "enhanced". For someone that complains about verbiage so much you should at least learn the name of the tool you're using. Again, not trying to be rude, but it's weird you really seem to think it's called "enhanced" lol

xyzulu

Dataforge But again, the wording doesn't say this. How does the user know they should do this. Do they enter the settings the enhance panel gave, or do they enter the settings the clouldflare panel gave?

You may have to work it out like most of us have had to. Enhance could have better documentation and community engaged etc, but despite that many of us here find it’s the best tool for the job.

No personal insults intended. I’m not always right (frequently not) either 😂

Dataforge

twest ya i am frequently wanting to call it enhanced it seems

JohnB

twest he wants to make it a verb like "Google it"

We have all been enhanced on this great day....not that I needed it

twest

Dataforge 😂

Dataforge

xyzulu I am not yet convinced its the best tool for the job, but I want to give it a fair shot!

xyzulu

Dataforge well, focus on the big things first. Enhance does them well… in my opinion.

slimx

@Dataforge
It is very common knowledge that if you are NOT using DNS on a platform, DNSSEC shouldn't be engaged.

If you are on cPanel and try to enable DNSSEC while using Cloudflare you will crawl through the same hurdle.
This is like telling someone they need to be well-hydrated before they drive to avoid an accident.
Most cars will not.
Volvo does not even do this.

xyzulu

mrEckendonk The DNSKEY show in Enhance is not yet implented to sync with CloudFlare.

You mean the DS record? If so, I would open a ticket and check with enhance. I know NS records for subdomains are not synced by Enhance to Cloudflare (without warning) but I was not aware that DS records are not synced.

Keep in mind Cloudflare have a DNSSEC system.. but DNSSEC is nothing more than a record at the domain registrar and the DNS host.

Kosta

Is there a API or something, when DNSSEC is enabled to be able to get the DNSSEC keys and automatically they to be added to our domain register etc.. ?