Cloudflare introduces Virtual DNS to protect and accelerate your DNS infrastructure

What is Virtual DNS?
Virtual DNS protects and accelerates any organization’s DNS infrastructure through robust DDoS mitigation, lightning-fast DNS lookups, and global distribution.

How is Virtual DNS different from Cloudflare's main DNS offering?
The difference between Cloudflare’s DNS and Virtual DNS is that with Virtual DNS, records stay on your own nameservers.

Why is Virtual DNS Important?

  • Virtual DNS can mask the true origin IP addresses of the provider's nameservers under Cloudflare’s IP.

  • Visitors and/or attackers can only see Cloudflare’s IP addresses when trying to contact the nameservers, keeping the nameservers safe from being targeted by attackers.


  • With Virtual DNS, Cloudflare acts as a proxy for DNS queries, caching requests at the edge at our 70+ data centers around the world.

  • This ensures that queries are resolved lightning-fast on every continent and in every major city regardless of request origin.

  • If the origin nameserver is knocked offline and the DNS records are cached on Cloudflare, Cloudflare will continue to answer for them, providing DNS answers even when the origin nameserver is unreachable.

How Does Virtual DNS Work?
Virtual DNS leverages Cloudflare’s global DNS and proxying infrastructure to provide performance and security for any nameserver by acting as authoritative for its domains.

With Virtual DNS, DNS queries destined for the provider's nameservers will first be sent to the nearest Cloudflare point-of-presence to the website visitor. If the proper DNS response is available in Cloudflare's cache, Cloudflare will return the response to the visitor, saving bandwidth at the origin nameserver. The cached records at the edge makes Cloudflare one of the fastest DNS providers anywhere in the world. (Reference:

To protect against attacks, malicious requests to the nameservers will be identified and blocked at Cloudflare’s edge before those requests ever make it to the provider's DNS infrastructure. Read about how DigitalOcean uses Virtual DNS to protect against attacks.

Why Should I Sign Up for Virtual DNS?
The benefits of Virtual DNS include:

  • Geographical distribution
  • Origin cloaking
  • DDoS mitigation
  • High uptime and availability
  • Caching at the edge
  • Bandwidth savings

How Do I Sign Up for Virtual DNS?
Virtual DNS is sold as a separate service from Cloudflare’s other plan offerings. For more information:

  • Contact our sales team: +1 888 99 FLARE
  • Or let us know you are interested HERE


Configuration best practices

When configuring Virtual DNS it is always recommend to use at least 2 IPv4 servers and 2 IPv6 servers. This will avoid issues when resolving queries to your DNS server.

Not finding what you need?

95% of questions can be answered using the search tool. This is the quickest way to get a response.

Powered by Zendesk