DNS Records¶
All Astradial DNS is managed through Cloudflare for the astradial.com zone. This page documents every subdomain and its proxy configuration.
Record Table¶
| Subdomain | Type | Target | Proxy | Purpose |
|---|---|---|---|---|
devpbx.astradial.com | A / CNAME | Cloud server | On (orange) | AstraPBX development API |
lite.astradial.com | A / CNAME | Cloud server | On (orange) | Lite web interface |
voice.astradial.com | A / CNAME | Cloud server | On (orange) | Voice services web UI |
events.astradial.com | A / CNAME | Cloud server | On (orange) | Event/webhook endpoint |
nuc.astradial.com | CNAME | Cloudflare Tunnel | On (orange) | SSH access to NUC via Cloudflare Tunnel |
status.astradial.com | CNAME | astradial.github.io | Off (grey) | Upptime status page (GitHub Pages) |
devsip.astradial.com | A | Cloud server | Off (grey) | SIP endpoint (must not be proxied) |
Proxy On vs. Off¶
When to enable the Cloudflare proxy
- Proxy On (orange cloud): HTTP/HTTPS traffic that benefits from Cloudflare's CDN, DDoS protection, and SSL termination. All web applications and API endpoints should use this.
- Proxy Off (grey cloud): Traffic that Cloudflare cannot proxy, including SIP (UDP/TCP 5060), or services that require direct IP resolution such as GitHub Pages CNAME verification.
Records That Must Stay Proxy-Off¶
devsip.astradial.com-- SIP clients need the real IP to establish UDP connections. Cloudflare does not proxy SIP traffic.status.astradial.com-- GitHub Pages requires the CNAME to resolve directly toastradial.github.iofor its custom domain verification.
Adding a New Subdomain¶
- Log into the Cloudflare dashboard and select the
astradial.comzone. - Go to DNS > Records and click Add Record.
- Choose the record type:
- A record if pointing to an IP address.
- CNAME record if pointing to another hostname (e.g., a Cloudflare Tunnel).
- Enter the subdomain name (just the prefix, e.g.,
newappfornewapp.astradial.com). - Set the target IP or hostname.
- Decide on proxy status:
- Enable proxy for HTTP/HTTPS services.
- Disable proxy for SIP, direct-IP, or third-party CNAME verification.
- Set TTL to Auto (proxied records ignore TTL anyway).
- Click Save.
SIP and non-HTTP protocols
Never enable the Cloudflare proxy for SIP endpoints. Cloudflare only proxies HTTP/HTTPS (and WebSocket) traffic. SIP, RTP, and other UDP protocols will break if proxied.