Nameservers over, mail left alone, origin with its own certificate.
The account stays yours. We add the zone, proxy the site, and leave MX, mail hostnames and FTP DNS-only. Flexible is not the mode we leave on.
Zone, records, then the registrar
The current zone copied in before nameservers change. An MX that arrives proxied is switched off before anyone queries the new names.
A certificate on the VPS, then Full (strict). The firewall can be limited to Cloudflare ranges after that, so the old IP is not a bypass.
Nameservers changed last. TTL on the old NS is not something we control. Mail is checked after the switch, not assumed.
Rocket Loader, a WAF rule you did not ask for, email routing
Email routing replaces your mail server. That is a different project. A cache that breaks wp-admin is turned off for that path, not celebrated as a hit rate.
SSL between Cloudflare and the origin → · Cloudflare and DNS →
€55 an hour. The Cloudflare plan is your invoice.
Minimum 1 hour for one zone. We ask for a member on the account, not the owner password. You remove it when the site answers on the new nameservers.
Putting a site on Cloudflare without losing mail?
Tell us the domain and where mail is hosted. No owner password in the first message.