Cloudflare

This guide adds the DNS records from Adding and verifying a domain at Cloudflare.

Records to create

Take the exact values from the records array of your domain (dashboard, API or spacepost domains doctor acme.com). The shape is always:

Type	Name	Value	Notes
CNAME	<token1>._domainkey	<token1>.dkim.amazonses.com	Three CNAMEs, one per token
MX	send	feedback-smtp.eu-central-1.amazonses.com	Priority 10
TXT	send	v=spf1 include:amazonses.com ~all	Return-path SPF
TXT	_dmarc	v=DMARC1; p=none;	Recommended

Steps

1. Open the Cloudflare dashboard, pick your domain and go to DNS then Records.
2. Click Add record for each record below.
3. For the DKIM CNAMEs, set Proxy status to DNS only (grey cloud). Proxied CNAMEs cannot be resolved by SES and verification will fail.
4. Enter the Name relative to the domain (a1b2c3d4e5f6._domainkey); Cloudflare appends acme.com.
5. For MX, set Priority to 10. For TXT, paste the value without quotes.
6. Save, wait a minute, then verify in SpacePost.

Notes

Caution

A proxied (orange cloud) DKIM CNAME is the most common reason a Cloudflare domain never verifies.

Cloudflare Email Routing adds its own MX and SPF records on the root. They do not conflict with the send subdomain records, but you must merge SPF only if you also send from the root domain via a second provider.

After saving, run spacepost domains doctor acme.com or call POST /domains/{id}/verify. If it does not verify, see Troubleshooting.