China Authoritative DNS

Cloudflare China Network provides a nearest-to-client nameservice by default. The DNS request is resolved on the data center nearest to the client out of China, and the HTTP request is served on the data center nearest to the client. The closest Cloudflare data center outside of China is adopted for clients outside of China, and the JD Cloud data center in China is adopted for clients in China.

In-China Nameserver

Cloudflare is able to deploy DNS service in mainland China to improve the Time to First Byte (TTFB) performance. With this deployment, the DNS query will be resolved in mainland China instead of global DNS servers.

When to use

Before you enable China Authoritative DNS, you should confirm that majority (over 90%) of the traffic is coming from China. After you enable China Authoritative DNS, all the global DNS requests will be routed to JD Cloud data centers in China instead of the nearest data centers.

Comparison

Default vs. In-China Nameserver

DNS Option	Behavior
Default	Uses the DNS server closest to the end user.
In-China Nameserver	Uses only DNS in China, operated by JD Cloud.

General setup

After you enable the Cloudflare China Network service, do the following:

1. Contact your account team to enable the feature. Currently, you cannot enable China Authoritative DNS in the Cloudflare dashboard.

   The Cloudflare China Network currently supports domains using a full setup or a partial setup.

2. Update your domain registrar with the assigned in-China nameservers.

   • Full setup: These nameservers are displayed in the Cloudflare dashboard.

   • Partial setup: CNAME to <host_name>.cdn.cloudflarecn.net.

   For example: You have a zone named samplezone.cn. In this zone, you have two DNS records: www and media, pointing to two different origins. Your Authoritative DNS server needs to set:

   CNAME www.samplezone.cn to www.samplezone.cn.cdn.cloudflarecn.net

   CNAME media.samplezone.cn to media.samplezone.cn.cdn.cloudflarecn.net

3. Test your configuration by checking if the domain resolves correctly.

For further assistance, contact your account team.