---
title: DNS
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api/terraform)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# DNS
#### DNSDNSSEC
#### resource cloudflare\_zone\_dnssec
##### required Expand Collapse
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zone_id>)
##### optional Expand Collapse
dnssec\_multi\_signer?: Bool
If true, multi-signer DNSSEC is enabled on the zone, allowing multiple providers to serve a DNSSEC-signed zone at the same time. This is required for DNSKEY records (except those automatically generated by Cloudflare) to be added to the zone.
See [Multi-signer DNSSEC](https://developers.cloudflare.com/dns/dnssec/multi-signer-dnssec/) for details.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20dnssec_multi_signer>)
dnssec\_presigned?: Bool
If true, allows Cloudflare to transfer in a DNSSEC-signed zone including signatures from an external provider, without requiring Cloudflare to sign any records on the fly.
Note that this feature has some limitations. See [Cloudflare as Secondary](https://developers.cloudflare.com/dns/zone-setups/zone-transfers/cloudflare-as-secondary/setup/#dnssec) for details.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20dnssec_presigned>)
dnssec\_use\_nsec3?: Bool
If true, enables the use of NSEC3 together with DNSSEC on the zone. Combined with setting dnssec\_presigned to true, this enables the use of NSEC3 records when transferring in from an external provider. If dnssec\_presigned is instead set to false (default), NSEC3 records will be generated and signed at request time.
See [DNSSEC with NSEC3](https://developers.cloudflare.com/dns/dnssec/enable-nsec3/) for details.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20dnssec_use_nsec3>)
status?: String
Status of DNSSEC, based on user-desired state and presence of necessary records.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20status>)
##### computed Expand Collapse
id: String
Identifier.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
algorithm: String
Algorithm key code.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20algorithm>)
digest: String
Digest hash.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20digest>)
digest\_algorithm: String
Type of digest algorithm.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20digest_algorithm>)
digest\_type: String
Coded type for digest algorithm.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20digest_type>)
ds: String
Full DS record.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20ds>)
flags: Float64
Flag for DNSSEC record.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20flags>)
key\_tag: Float64
Code for key tag.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20key_tag>)
key\_type: String
Algorithm key type.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20key_type>)
modified\_on: Time
When DNSSEC was last modified.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20modified_on>)
public\_key: String
Public key for DS record.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20public_key>)
### cloudflare\_zone\_dnssec
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_zone_dnssec" "example_zone_dnssec" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
dnssec_multi_signer = false
dnssec_presigned = true
dnssec_use_nsec3 = false
status = "active"
}
```
#### data cloudflare\_zone\_dnssec
##### required Expand Collapse
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zone_id>)
##### computed Expand Collapse
id: String
Identifier.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
algorithm: String
Algorithm key code.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20algorithm>)
digest: String
Digest hash.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20digest>)
digest\_algorithm: String
Type of digest algorithm.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20digest_algorithm>)
digest\_type: String
Coded type for digest algorithm.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20digest_type>)
dnssec\_multi\_signer: Bool
If true, multi-signer DNSSEC is enabled on the zone, allowing multiple providers to serve a DNSSEC-signed zone at the same time. This is required for DNSKEY records (except those automatically generated by Cloudflare) to be added to the zone.
See [Multi-signer DNSSEC](https://developers.cloudflare.com/dns/dnssec/multi-signer-dnssec/) for details.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20dnssec_multi_signer>)
dnssec\_presigned: Bool
If true, allows Cloudflare to transfer in a DNSSEC-signed zone including signatures from an external provider, without requiring Cloudflare to sign any records on the fly.
Note that this feature has some limitations. See [Cloudflare as Secondary](https://developers.cloudflare.com/dns/zone-setups/zone-transfers/cloudflare-as-secondary/setup/#dnssec) for details.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20dnssec_presigned>)
dnssec\_use\_nsec3: Bool
If true, enables the use of NSEC3 together with DNSSEC on the zone. Combined with setting dnssec\_presigned to true, this enables the use of NSEC3 records when transferring in from an external provider. If dnssec\_presigned is instead set to false (default), NSEC3 records will be generated and signed at request time.
See [DNSSEC with NSEC3](https://developers.cloudflare.com/dns/dnssec/enable-nsec3/) for details.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20dnssec_use_nsec3>)
ds: String
Full DS record.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20ds>)
flags: Float64
Flag for DNSSEC record.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20flags>)
key\_tag: Float64
Code for key tag.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20key_tag>)
key\_type: String
Algorithm key type.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20key_type>)
modified\_on: Time
When DNSSEC was last modified.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20modified_on>)
public\_key: String
Public key for DS record.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20public_key>)
status: String
Status of DNSSEC, based on user-desired state and presence of necessary records.
[Link to this property](<#(resource)%20dns.dnssec%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20status>)
### cloudflare\_zone\_dnssec
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_zone_dnssec" "example_zone_dnssec" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
}
```
#### DNSRecords
#### resource cloudflare\_dns\_record
##### required Expand Collapse
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zone_id>)
name: String
Complete DNS record name, including the zone name, in Punycode.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>)
type: String
Record type.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20type>)
##### optional Expand Collapse
comment?: String
Comments or notes about the DNS record. This field has no effect on DNS responses.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20comment>)
content?: String
A valid IPv4 address.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20content>)
priority?: Float64
Required for MX and URI records; ignored for other record types (but may still be returned by the API). Records with lower priorities are preferred. This field is to be deprecated in favor of the priority field within the data map.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20priority>)
data?: Attributes
Components of a CAA record.
flags?: Dynamic Float64 | String
Flags for the CAA record.
Link to this property
tag?: String
Name of the property controlled by this record (e.g.: issue, issuewild, iodef).
Link to this property
value?: String
Value of the record. This field’s semantics depend on the chosen tag.
Link to this property
algorithm?: Float64
Algorithm.
Link to this property
certificate?: String
Certificate.
Link to this property
key\_tag?: Float64
Key Tag.
Link to this property
type?: Float64
Type.
Link to this property
protocol?: Float64
Protocol.
Link to this property
public\_key?: String
Public Key.
Link to this property
digest?: String
Digest.
Link to this property
digest\_type?: Float64
Digest Type.
Link to this property
priority?: Float64
Priority.
Link to this property
target?: String
Target.
Link to this property
altitude?: Float64
Altitude of location in meters.
Link to this property
lat\_degrees?: Float64
Degrees of latitude.
Link to this property
lat\_direction?: String
Latitude direction.
Link to this property
lat\_minutes?: Float64
Minutes of latitude.
Link to this property
lat\_seconds?: Float64
Seconds of latitude.
Link to this property
long\_degrees?: Float64
Degrees of longitude.
Link to this property
long\_direction?: String
Longitude direction.
Link to this property
long\_minutes?: Float64
Minutes of longitude.
Link to this property
long\_seconds?: Float64
Seconds of longitude.
Link to this property
precision\_horz?: Float64
Horizontal precision of location.
Link to this property
precision\_vert?: Float64
Vertical precision of location.
Link to this property
size?: Float64
Size of location in meters.
Link to this property
order?: Float64
Order.
Link to this property
preference?: Float64
Preference.
Link to this property
regex?: String
Regex.
Link to this property
replacement?: String
Replacement.
Link to this property
service?: String
Service.
Link to this property
matching\_type?: Float64
Matching Type.
Link to this property
selector?: Float64
Selector.
Link to this property
usage?: Float64
Usage.
Link to this property
port?: Float64
The port of the service.
Link to this property
weight?: Float64
The record weight.
Link to this property
fingerprint?: String
Fingerprint.
Link to this property
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20data>)
private\_routing?: Bool
Enables private network routing to the origin.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20private_routing>)
proxied?: Bool
Whether the record is receiving the performance and security benefits of Cloudflare.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20proxied>)
ttl?: Float64
Time To Live (TTL) of the DNS record in seconds. Setting to 1 means ‘automatic’. Value must be between 60 and 86400, with the minimum reduced to 30 for Enterprise zones.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20ttl>)
tags?: Set\[String]
Custom tags for the DNS record. This field has no effect on DNS responses.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20tags>)
settings?: Attributes
Settings for the DNS record.
ipv4\_only?: Bool
When enabled, only A records will be generated, and AAAA records will not be created. This setting is intended for exceptional cases. Note that this option only applies to proxied records and it has no effect on whether Cloudflare communicates with the origin using IPv4 or IPv6.
Link to this property
ipv6\_only?: Bool
When enabled, only AAAA records will be generated, and A records will not be created. This setting is intended for exceptional cases. Note that this option only applies to proxied records and it has no effect on whether Cloudflare communicates with the origin using IPv4 or IPv6.
Link to this property
flatten\_cname?: Bool
If enabled, causes the CNAME record to be resolved externally and the resulting address records (e.g., A and AAAA) to be returned instead of the CNAME record itself. This setting is unavailable for proxied records, since they are always flattened.
Link to this property
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20settings>)
##### computed Expand Collapse
id: String
Identifier.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
comment\_modified\_on: Time
When the record comment was last modified. Omitted if there is no comment.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20comment_modified_on>)
created\_on: Time
When the record was created.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_on>)
modified\_on: Time
When the record was last modified.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20modified_on>)
proxiable: Bool
Whether the record can be proxied by Cloudflare or not.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20proxiable>)
tags\_modified\_on: Time
When the record tags were last modified. Omitted if there are no tags.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20tags_modified_on>)
meta: Attributes
Extra Cloudflare-specific metadata about the record.
dead\_glue: Bool
Whether this glue record is not served because a shallower NS delegation takes precedence over the deeper delegation that needs it. Present only when true; reachable glue carries only is_glue. See Unreachable glue records.
Link to this property
is\_glue: Bool
Whether this A or AAAA record is glue for a subdomain NS delegation. See Glue records.
Link to this property
shadowed\_by: List\[String]
IDs of the NS records that shadow this record. See Shadowed records.
Link to this property
shadowed\_records\_count: Int64
Number of records shadowed by this NS delegation. See Shadowed records.
Link to this property
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20meta>)
### cloudflare\_dns\_record
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_dns_record" "example_dns_record" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
name = "example.com"
ttl = 3600
type = "A"
comment = "Domain verification record"
content = "198.51.100.4"
private_routing = true
proxied = true
settings = {
ipv4_only = true
ipv6_only = true
}
tags = ["owner:dns-team"]
}
```
#### data cloudflare\_dns\_record
##### required Expand Collapse
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zone_id>)
##### optional Expand Collapse
dns\_record\_id?: String
Identifier.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20dns_record_id>)
include\_shadow\_metadata?: Bool
Whether to include shadow metadata in the `meta` field of each record in the response. See [Shadowed records](https://developers.cloudflare.com/dns/manage-dns-records/reference/shadowed-records).
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20include_shadow_metadata>)
filter?: Attributes
comment?: Attributes
absent?: String
If this parameter is present, only records *without* a comment are returned.
Link to this property
contains?: String
Substring of the DNS record comment. Comment filters are case-insensitive.
Link to this property
endswith?: String
Suffix of the DNS record comment. Comment filters are case-insensitive.
Link to this property
exact?: String
Exact value of the DNS record comment. Comment filters are case-insensitive.
Link to this property
present?: String
If this parameter is present, only records *with* a comment are returned.
Link to this property
startswith?: String
Prefix of the DNS record comment. Comment filters are case-insensitive.
Link to this property
Link to this property
content?: Attributes
contains?: String
Substring of the DNS record content. Content filters are case-insensitive.
Link to this property
endswith?: String
Suffix of the DNS record content. Content filters are case-insensitive.
Link to this property
exact?: String
Exact value of the DNS record content. Content filters are case-insensitive.
Link to this property
startswith?: String
Prefix of the DNS record content. Content filters are case-insensitive.
Link to this property
Link to this property
direction?: String
Direction to order DNS records in.
Link to this property
match?: String
Whether to match all search requirements or at least one (any). If set to all, acts like a logical AND between filters. If set to any, acts like a logical OR instead. Note that the interaction between tag filters is controlled by the tag-match parameter instead.
Link to this property
name?: Attributes
contains?: String
Substring of the DNS record name. Name filters are case-insensitive.
Link to this property
endswith?: String
Suffix of the DNS record name. Name filters are case-insensitive.
Link to this property
exact?: String
Exact value of the DNS record name. Name filters are case-insensitive.
Link to this property
startswith?: String
Prefix of the DNS record name. Name filters are case-insensitive.
Link to this property
Link to this property
order?: String
Field to order DNS records by.
Link to this property
proxied?: Bool
Whether the record is receiving the performance and security benefits of Cloudflare.
Link to this property
search?: String
Allows searching in multiple properties of a DNS record simultaneously. This parameter is intended for human users, not automation. Its exact behavior is intentionally left unspecified and is subject to change in the future. This parameter works independently of the match setting. For automated searches, please use the other available parameters.
Link to this property
shadowed\_by\_name?: String
Filters the response to records at or below the specified NS delegation name. NS, DS, and NSEC records at the delegation name are excluded because they are not shadowed by that delegation. Those record types are included only when they exist below the delegation. The value must be a non-apex subdomain of the zone. Requires include_shadow_metadata=true. See Shadowed records.
Link to this property
shadowing\_name?: String
Returns NS records that shadow the given name, searching at the name itself and each of its ancestor names within the zone, excluding the zone apex. The value must be a subdomain of the zone; the zone apex is not accepted. See Shadowed records.
Link to this property
tag?: Attributes
absent?: String
Name of a tag which must *not* be present on the DNS record. Tag filters are case-insensitive.
Link to this property
contains?: String
A tag and value, of the form <tag-name>:<tag-value>. The API will only return DNS records that have a tag named <tag-name> whose value contains <tag-value>. Tag filters are case-insensitive.
Link to this property
endswith?: String
A tag and value, of the form <tag-name>:<tag-value>. The API will only return DNS records that have a tag named <tag-name> whose value ends with <tag-value>. Tag filters are case-insensitive.
Link to this property
exact?: String
A tag and value, of the form <tag-name>:<tag-value>. The API will only return DNS records that have a tag named <tag-name> whose value is <tag-value>. Tag filters are case-insensitive.
Link to this property
present?: String
Name of a tag which must be present on the DNS record. Tag filters are case-insensitive.
Link to this property
startswith?: String
A tag and value, of the form <tag-name>:<tag-value>. The API will only return DNS records that have a tag named <tag-name> whose value starts with <tag-value>. Tag filters are case-insensitive.
Link to this property
Link to this property
tag\_match?: String
Whether to match all tag search requirements or at least one (any). If set to all, acts like a logical AND between tag filters. If set to any, acts like a logical OR instead. Note that the regular match parameter is still used to combine the resulting condition with other filters that aren’t related to tags.
Link to this property
type?: String
Record type.
Link to this property
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>)
##### computed Expand Collapse
id: String
Identifier.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
comment: String
Comments or notes about the DNS record. This field has no effect on DNS responses.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20comment>)
comment\_modified\_on: Time
When the record comment was last modified. Omitted if there is no comment.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20comment_modified_on>)
content: String
A valid IPv4 address.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20content>)
created\_on: Time
When the record was created.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_on>)
modified\_on: Time
When the record was last modified.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20modified_on>)
name: String
Complete DNS record name, including the zone name, in Punycode.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>)
priority: Float64
Required for MX and URI records; ignored for other record types (but may still be returned by the API). Records with lower priorities are preferred. This field is to be deprecated in favor of the priority field within the data map.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20priority>)
private\_routing: Bool
Enables private network routing to the origin.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20private_routing>)
proxiable: Bool
Whether the record can be proxied by Cloudflare or not.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20proxiable>)
proxied: Bool
Whether the record is receiving the performance and security benefits of Cloudflare.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20proxied>)
tags\_modified\_on: Time
When the record tags were last modified. Omitted if there are no tags.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20tags_modified_on>)
ttl: Float64
Time To Live (TTL) of the DNS record in seconds. Setting to 1 means ‘automatic’. Value must be between 60 and 86400, with the minimum reduced to 30 for Enterprise zones.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20ttl>)
type: String
Record type.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20type>)
tags: Set\[String]
Custom tags for the DNS record. This field has no effect on DNS responses.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20tags>)
data: Attributes
Components of a CAA record.
flags: Dynamic Float64 | String
Flags for the CAA record.
Link to this property
tag: String
Name of the property controlled by this record (e.g.: issue, issuewild, iodef).
Link to this property
value: String
Value of the record. This field’s semantics depend on the chosen tag.
Link to this property
algorithm: Float64
Algorithm.
Link to this property
certificate: String
Certificate.
Link to this property
key\_tag: Float64
Key Tag.
Link to this property
type: Float64
Type.
Link to this property
protocol: Float64
Protocol.
Link to this property
public\_key: String
Public Key.
Link to this property
digest: String
Digest.
Link to this property
digest\_type: Float64
Digest Type.
Link to this property
priority: Float64
Priority.
Link to this property
target: String
Target.
Link to this property
altitude: Float64
Altitude of location in meters.
Link to this property
lat\_degrees: Float64
Degrees of latitude.
Link to this property
lat\_direction: String
Latitude direction.
Link to this property
lat\_minutes: Float64
Minutes of latitude.
Link to this property
lat\_seconds: Float64
Seconds of latitude.
Link to this property
long\_degrees: Float64
Degrees of longitude.
Link to this property
long\_direction: String
Longitude direction.
Link to this property
long\_minutes: Float64
Minutes of longitude.
Link to this property
long\_seconds: Float64
Seconds of longitude.
Link to this property
precision\_horz: Float64
Horizontal precision of location.
Link to this property
precision\_vert: Float64
Vertical precision of location.
Link to this property
size: Float64
Size of location in meters.
Link to this property
order: Float64
Order.
Link to this property
preference: Float64
Preference.
Link to this property
regex: String
Regex.
Link to this property
replacement: String
Replacement.
Link to this property
service: String
Service.
Link to this property
matching\_type: Float64
Matching Type.
Link to this property
selector: Float64
Selector.
Link to this property
usage: Float64
Usage.
Link to this property
port: Float64
The port of the service.
Link to this property
weight: Float64
The record weight.
Link to this property
fingerprint: String
Fingerprint.
Link to this property
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20data>)
meta: Attributes
Extra Cloudflare-specific metadata about the record.
dead\_glue: Bool
Whether this glue record is not served because a shallower NS delegation takes precedence over the deeper delegation that needs it. Present only when true; reachable glue carries only is_glue. See Unreachable glue records.
Link to this property
is\_glue: Bool
Whether this A or AAAA record is glue for a subdomain NS delegation. See Glue records.
Link to this property
shadowed\_by: List\[String]
IDs of the NS records that shadow this record. See Shadowed records.
Link to this property
shadowed\_records\_count: Int64
Number of records shadowed by this NS delegation. See Shadowed records.
Link to this property
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20meta>)
settings: Attributes
Settings for the DNS record.
ipv4\_only: Bool
When enabled, only A records will be generated, and AAAA records will not be created. This setting is intended for exceptional cases. Note that this option only applies to proxied records and it has no effect on whether Cloudflare communicates with the origin using IPv4 or IPv6.
Link to this property
ipv6\_only: Bool
When enabled, only AAAA records will be generated, and A records will not be created. This setting is intended for exceptional cases. Note that this option only applies to proxied records and it has no effect on whether Cloudflare communicates with the origin using IPv4 or IPv6.
Link to this property
flatten\_cname: Bool
If enabled, causes the CNAME record to be resolved externally and the resulting address records (e.g., A and AAAA) to be returned instead of the CNAME record itself. This setting is unavailable for proxied records, since they are always flattened.
Link to this property
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20settings>)
### cloudflare\_dns\_record
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_dns_record" "example_dns_record" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
dns_record_id = "023e105f4ecef8ad9ca31a8372d0c353"
include_shadow_metadata = true
}
```
#### data cloudflare\_dns\_records
##### required Expand Collapse
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20zone_id>)
##### optional Expand Collapse
search?: String
Allows searching in multiple properties of a DNS record simultaneously. This parameter is intended for human users, not automation. Its exact behavior is intentionally left unspecified and is subject to change in the future. This parameter works independently of the `match` setting. For automated searches, please use the other available parameters.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20search>)
shadowed\_by\_name?: String
Filters the response to records at or below the specified NS delegation name. NS, DS, and NSEC records at the delegation name are excluded because they are not shadowed by that delegation. Those record types are included only when they exist below the delegation. The value must be a non-apex subdomain of the zone. Requires `include_shadow_metadata=true`. See [Shadowed records](https://developers.cloudflare.com/dns/manage-dns-records/reference/shadowed-records).
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20shadowed_by_name>)
shadowing\_name?: String
Returns NS records that shadow the given name, searching at the name itself and each of its ancestor names within the zone, excluding the zone apex. The value must be a subdomain of the zone; the zone apex is not accepted. See [Shadowed records](https://developers.cloudflare.com/dns/manage-dns-records/reference/shadowed-records).
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20shadowing_name>)
type?: String
Record type.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20type>)
comment?: Attributes
absent?: String
If this parameter is present, only records *without* a comment are returned.
Link to this property
contains?: String
Substring of the DNS record comment. Comment filters are case-insensitive.
Link to this property
endswith?: String
Suffix of the DNS record comment. Comment filters are case-insensitive.
Link to this property
exact?: String
Exact value of the DNS record comment. Comment filters are case-insensitive.
Link to this property
present?: String
If this parameter is present, only records *with* a comment are returned.
Link to this property
startswith?: String
Prefix of the DNS record comment. Comment filters are case-insensitive.
Link to this property
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20comment>)
content?: Attributes
contains?: String
Substring of the DNS record content. Content filters are case-insensitive.
Link to this property
endswith?: String
Suffix of the DNS record content. Content filters are case-insensitive.
Link to this property
exact?: String
Exact value of the DNS record content. Content filters are case-insensitive.
Link to this property
startswith?: String
Prefix of the DNS record content. Content filters are case-insensitive.
Link to this property
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20content>)
name?: Attributes
contains?: String
Substring of the DNS record name. Name filters are case-insensitive.
Link to this property
endswith?: String
Suffix of the DNS record name. Name filters are case-insensitive.
Link to this property
exact?: String
Exact value of the DNS record name. Name filters are case-insensitive.
Link to this property
startswith?: String
Prefix of the DNS record name. Name filters are case-insensitive.
Link to this property
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20name>)
tag?: Attributes
absent?: String
Name of a tag which must *not* be present on the DNS record. Tag filters are case-insensitive.
Link to this property
contains?: String
A tag and value, of the form <tag-name>:<tag-value>. The API will only return DNS records that have a tag named <tag-name> whose value contains <tag-value>. Tag filters are case-insensitive.
Link to this property
endswith?: String
A tag and value, of the form <tag-name>:<tag-value>. The API will only return DNS records that have a tag named <tag-name> whose value ends with <tag-value>. Tag filters are case-insensitive.
Link to this property
exact?: String
A tag and value, of the form <tag-name>:<tag-value>. The API will only return DNS records that have a tag named <tag-name> whose value is <tag-value>. Tag filters are case-insensitive.
Link to this property
present?: String
Name of a tag which must be present on the DNS record. Tag filters are case-insensitive.
Link to this property
startswith?: String
A tag and value, of the form <tag-name>:<tag-value>. The API will only return DNS records that have a tag named <tag-name> whose value starts with <tag-value>. Tag filters are case-insensitive.
Link to this property
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20tag>)
direction?: String
Direction to order DNS records in.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20direction>)
include\_shadow\_metadata?: Bool
Whether to include shadow metadata in the `meta` field of each record in the response. See [Shadowed records](https://developers.cloudflare.com/dns/manage-dns-records/reference/shadowed-records).
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20include_shadow_metadata>)
match?: String
Whether to match all search requirements or at least one (any). If set to `all`, acts like a logical AND between filters. If set to `any`, acts like a logical OR instead. Note that the interaction between tag filters is controlled by the `tag-match` parameter instead.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20match>)
order?: String
Field to order DNS records by.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20order>)
proxied?: Bool
Whether the record is receiving the performance and security benefits of Cloudflare.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20proxied>)
tag\_match?: String
Whether to match all tag search requirements or at least one (any). If set to `all`, acts like a logical AND between tag filters. If set to `any`, acts like a logical OR instead. Note that the regular `match` parameter is still used to combine the resulting condition with other filters that aren’t related to tags.
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20tag_match>)
max\_items?: Int64
Max items to fetch, default: 1000
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)
##### computed Expand Collapse
result: List\[Attributes]
The items returned by the data source
name: String
Complete DNS record name, including the zone name, in Punycode.
Link to this property
ttl: Float64
Time To Live (TTL) of the DNS record in seconds. Setting to 1 means ‘automatic’. Value must be between 60 and 86400, with the minimum reduced to 30 for Enterprise zones.
Link to this property
type: String
Record type.
Link to this property
comment: String
Comments or notes about the DNS record. This field has no effect on DNS responses.
Link to this property
content: String
A valid IPv4 address.
Link to this property
private\_routing: Bool
Enables private network routing to the origin.
Link to this property
proxied: Bool
Whether the record is receiving the performance and security benefits of Cloudflare.
Link to this property
settings: Attributes
Settings for the DNS record.
ipv4\_only: Bool
When enabled, only A records will be generated, and AAAA records will not be created. This setting is intended for exceptional cases. Note that this option only applies to proxied records and it has no effect on whether Cloudflare communicates with the origin using IPv4 or IPv6.
Link to this property
ipv6\_only: Bool
When enabled, only AAAA records will be generated, and A records will not be created. This setting is intended for exceptional cases. Note that this option only applies to proxied records and it has no effect on whether Cloudflare communicates with the origin using IPv4 or IPv6.
Link to this property
flatten\_cname: Bool
If enabled, causes the CNAME record to be resolved externally and the resulting address records (e.g., A and AAAA) to be returned instead of the CNAME record itself. This setting is unavailable for proxied records, since they are always flattened.
Link to this property
Link to this property
tags: Set\[String]
Custom tags for the DNS record. This field has no effect on DNS responses.
Link to this property
id: String
Identifier.
Link to this property
created\_on: Time
When the record was created.
Link to this property
meta: Attributes
Extra Cloudflare-specific metadata about the record.
dead\_glue: Bool
Whether this glue record is not served because a shallower NS delegation takes precedence over the deeper delegation that needs it. Present only when true; reachable glue carries only is_glue. See Unreachable glue records.
Link to this property
is\_glue: Bool
Whether this A or AAAA record is glue for a subdomain NS delegation. See Glue records.
Link to this property
shadowed\_by: List\[String]
IDs of the NS records that shadow this record. See Shadowed records.
Link to this property
shadowed\_records\_count: Int64
Number of records shadowed by this NS delegation. See Shadowed records.
Link to this property
Link to this property
modified\_on: Time
When the record was last modified.
Link to this property
proxiable: Bool
Whether the record can be proxied by Cloudflare or not.
Link to this property
comment\_modified\_on: Time
When the record comment was last modified. Omitted if there is no comment.
Link to this property
tags\_modified\_on: Time
When the record tags were last modified. Omitted if there are no tags.
Link to this property
priority: Float64
Required for MX and URI records; ignored for other record types (but may still be returned by the API). Records with lower priorities are preferred. This field is to be deprecated in favor of the priority field within the data map.
Link to this property
data: Attributes
Components of a CAA record.
flags: Dynamic Float64 | String
Flags for the CAA record.
Link to this property
tag: String
Name of the property controlled by this record (e.g.: issue, issuewild, iodef).
Link to this property
value: String
Value of the record. This field’s semantics depend on the chosen tag.
Link to this property
algorithm: Float64
Algorithm.
Link to this property
certificate: String
Certificate.
Link to this property
key\_tag: Float64
Key Tag.
Link to this property
type: Float64
Type.
Link to this property
protocol: Float64
Protocol.
Link to this property
public\_key: String
Public Key.
Link to this property
digest: String
Digest.
Link to this property
digest\_type: Float64
Digest Type.
Link to this property
priority: Float64
Priority.
Link to this property
target: String
Target.
Link to this property
altitude: Float64
Altitude of location in meters.
Link to this property
lat\_degrees: Float64
Degrees of latitude.
Link to this property
lat\_direction: String
Latitude direction.
Link to this property
lat\_minutes: Float64
Minutes of latitude.
Link to this property
lat\_seconds: Float64
Seconds of latitude.
Link to this property
long\_degrees: Float64
Degrees of longitude.
Link to this property
long\_direction: String
Longitude direction.
Link to this property
long\_minutes: Float64
Minutes of longitude.
Link to this property
long\_seconds: Float64
Seconds of longitude.
Link to this property
precision\_horz: Float64
Horizontal precision of location.
Link to this property
precision\_vert: Float64
Vertical precision of location.
Link to this property
size: Float64
Size of location in meters.
Link to this property
order: Float64
Order.
Link to this property
preference: Float64
Preference.
Link to this property
regex: String
Regex.
Link to this property
replacement: String
Replacement.
Link to this property
service: String
Service.
Link to this property
matching\_type: Float64
Matching Type.
Link to this property
selector: Float64
Selector.
Link to this property
usage: Float64
Usage.
Link to this property
port: Float64
The port of the service.
Link to this property
weight: Float64
The record weight.
Link to this property
fingerprint: String
Fingerprint.
Link to this property
Link to this property
[Link to this property](<#(resource)%20dns.records%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)
### cloudflare\_dns\_records
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_dns_records" "example_dns_records" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
comment = {
absent = "absent"
contains = "ello, worl"
endswith = "o, world"
exact = "Hello, world"
present = "present"
startswith = "Hello, w"
}
content = {
contains = "7.0.0."
endswith = ".0.1"
exact = "127.0.0.1"
startswith = "127.0."
}
name = {
contains = "w.example."
endswith = ".example.com"
exact = "www.example.com"
startswith = "www.example"
}
search = "www.cloudflare.com"
shadowed_by_name = "sub.example.com"
shadowing_name = "www.sub.example.com"
tag = {
absent = "important"
contains = "greeting:ello, worl"
endswith = "greeting:o, world"
exact = "greeting:Hello, world"
present = "important"
startswith = "greeting:Hello, w"
}
type = "A"
}
```
#### DNSSettingsZone
#### resource cloudflare\_zone\_dns\_settings
##### required Expand Collapse
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zone_id>)
##### optional Expand Collapse
flatten\_all\_cnames?: Bool
Whether to flatten all CNAME records in the zone. Note that, due to DNS limitations, a CNAME record at the zone apex will always be flattened.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20flatten_all_cnames>)
Deprecatedfoundation\_dns?: Bool
foundation\_dns is deprecated. Use nameservers.type: cloudflare.advanced to turn on Advanced Nameservers and cloudflare.standard to turn it off. This field will be removed in a future API version.
Deprecated. Use nameservers.type to configure Advanced Nameservers.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20foundation_dns>)
multi\_provider?: Bool
Whether to enable multi-provider DNS, which causes Cloudflare to activate the zone even when non-Cloudflare NS records exist, and to respect NS records at the zone apex during outbound zone transfers.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20multi_provider>)
ns\_ttl?: Float64
The time to live (TTL) of the zone’s nameserver (NS) records.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20ns_ttl>)
secondary\_overrides?: Bool
Allows a Secondary DNS zone to use (proxied) override records and CNAME flattening at the zone apex.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20secondary_overrides>)
zone\_mode?: String
Whether the zone mode is a regular or CDN/DNS only zone.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zone_mode>)
internal\_dns?: Attributes
Settings for this internal zone.
reference\_zone\_id?: String
The ID of the zone to fallback to.
Link to this property
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20internal_dns>)
nameservers?: Attributes
Controls the nameservers through which the zone is available.
type: String
Nameserver type.
Link to this property
ns\_set?: Int64
Configured nameserver set number to use for this zone.
Link to this property
nameserver\_set\_id?: String
Identifier of the account-owned Custom Nameserver Set to use for this zone.
Link to this property
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20nameservers>)
soa?: Attributes
Components of the zone’s SOA record.
expire?: Float64
Time in seconds of being unable to query the primary server after which secondary servers should stop serving the zone.
Link to this property
min\_ttl?: Float64
The time to live (TTL) for negative caching of records within the zone.
Link to this property
mname?: String
The primary nameserver, which may be used for outbound zone transfers. If null, a Cloudflare-assigned value will be used.
Link to this property
refresh?: Float64
Time in seconds after which secondary servers should re-check the SOA record to see if the zone has been updated.
Link to this property
retry?: Float64
Time in seconds after which secondary servers should retry queries after the primary server was unresponsive.
Link to this property
rname?: String
The email address of the zone administrator, with the first label representing the local part of the email address.
Link to this property
ttl?: Float64
The time to live (TTL) of the SOA record itself.
Link to this property
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20soa>)
### cloudflare\_zone\_dns\_settings
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_zone_dns_settings" "example_zone_dns_settings" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
flatten_all_cnames = false
foundation_dns = false
internal_dns = {
reference_zone_id = "reference_zone_id"
}
multi_provider = false
nameservers = {
type = "cloudflare.standard"
}
ns_ttl = 86400
secondary_overrides = false
soa = {
expire = 604800
min_ttl = 1800
mname = "kristina.ns.cloudflare.com"
refresh = 10000
retry = 2400
rname = "admin.example.com"
ttl = 3600
}
zone_mode = "dns_only"
}
```
#### data cloudflare\_zone\_dns\_settings
##### required Expand Collapse
zone\_id: String
Identifier.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zone_id>)
##### computed Expand Collapse
flatten\_all\_cnames: Bool
Whether to flatten all CNAME records in the zone. Note that, due to DNS limitations, a CNAME record at the zone apex will always be flattened.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20flatten_all_cnames>)
Deprecatedfoundation\_dns: Bool
foundation\_dns is deprecated. Use nameservers.type: cloudflare.advanced to turn on Advanced Nameservers and cloudflare.standard to turn it off. This field will be removed in a future API version.
Deprecated. Use nameservers.type to configure Advanced Nameservers.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20foundation_dns>)
multi\_provider: Bool
Whether to enable multi-provider DNS, which causes Cloudflare to activate the zone even when non-Cloudflare NS records exist, and to respect NS records at the zone apex during outbound zone transfers.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20multi_provider>)
ns\_ttl: Float64
The time to live (TTL) of the zone’s nameserver (NS) records.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20ns_ttl>)
secondary\_overrides: Bool
Allows a Secondary DNS zone to use (proxied) override records and CNAME flattening at the zone apex.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20secondary_overrides>)
zone\_mode: String
Whether the zone mode is a regular or CDN/DNS only zone.
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zone_mode>)
internal\_dns: Attributes
Settings for this internal zone.
reference\_zone\_id: String
The ID of the zone to fallback to.
Link to this property
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20internal_dns>)
nameservers: Attributes
Controls the nameservers through which the zone is available.
type: String
Nameserver type.
Link to this property
ns\_set: Int64
Configured nameserver set number to use for this zone.
Link to this property
nameserver\_set\_id: String
Identifier of the account-owned Custom Nameserver Set to use for this zone.
Link to this property
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20nameservers>)
soa: Attributes
Components of the zone’s SOA record.
expire: Float64
Time in seconds of being unable to query the primary server after which secondary servers should stop serving the zone.
Link to this property
min\_ttl: Float64
The time to live (TTL) for negative caching of records within the zone.
Link to this property
mname: String
The primary nameserver, which may be used for outbound zone transfers. If null, a Cloudflare-assigned value will be used.
Link to this property
refresh: Float64
Time in seconds after which secondary servers should re-check the SOA record to see if the zone has been updated.
Link to this property
retry: Float64
Time in seconds after which secondary servers should retry queries after the primary server was unresponsive.
Link to this property
rname: String
The email address of the zone administrator, with the first label representing the local part of the email address.
Link to this property
ttl: Float64
The time to live (TTL) of the SOA record itself.
Link to this property
[Link to this property](<#(resource)%20dns.settings.zone%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20soa>)
### cloudflare\_zone\_dns\_settings
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_zone_dns_settings" "example_zone_dns_settings" {
zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
}
```
#### DNSSettingsAccount
#### resource cloudflare\_account\_dns\_settings
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20dns.settings.account%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
enforce\_dns\_only?: Bool
When enabled, forces all proxied DNS records in the account to behave as DNS-only at the edge, regardless of each record’s individual proxy setting. Note that this account-level override does not modify the records themselves; it only affects how they are served at the edge. See more on [Enforce DNS-only](https://developers.cloudflare.com/dns/proxy-status/enforce-dns-only).
[Link to this property](<#(resource)%20dns.settings.account%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20enforce_dns_only>)
zone\_defaults?: Attributes
Default settings for new zones created in this account.
flatten\_all\_cnames?: Bool
Whether to flatten all CNAME records in the zone. Note that, due to DNS limitations, a CNAME record at the zone apex will always be flattened.
Link to this property
Deprecatedfoundation\_dns?: Bool
foundation\_dns is deprecated. Use nameservers.type: cloudflare.advanced to turn on Advanced Nameservers and cloudflare.standard to turn it off. This field will be removed in a future API version.
Deprecated. Use nameservers.type to configure Advanced Nameservers.
Link to this property
internal\_dns?: Attributes
Settings for this internal zone.
reference\_zone\_id?: String
The ID of the zone to fallback to.
Link to this property
Link to this property
multi\_provider?: Bool
Whether to enable multi-provider DNS, which causes Cloudflare to activate the zone even when non-Cloudflare NS records exist, and to respect NS records at the zone apex during outbound zone transfers.
Link to this property
nameservers?: Attributes
Settings determining the nameservers through which the zone should be available.
type?: String
Nameserver type
Link to this property
Link to this property
ns\_ttl?: Float64
The time to live (TTL) of the zone’s nameserver (NS) records.
Link to this property
secondary\_overrides?: Bool
Allows a Secondary DNS zone to use (proxied) override records and CNAME flattening at the zone apex.
Link to this property
soa?: Attributes
Components of the zone’s SOA record.
expire?: Float64
Time in seconds of being unable to query the primary server after which secondary servers should stop serving the zone.
Link to this property
min\_ttl?: Float64
The time to live (TTL) for negative caching of records within the zone.
Link to this property
mname?: String
The primary nameserver, which may be used for outbound zone transfers. If null, a Cloudflare-assigned value will be used.
Link to this property
refresh?: Float64
Time in seconds after which secondary servers should re-check the SOA record to see if the zone has been updated.
Link to this property
retry?: Float64
Time in seconds after which secondary servers should retry queries after the primary server was unresponsive.
Link to this property
rname?: String
The email address of the zone administrator, with the first label representing the local part of the email address.
Link to this property
ttl?: Float64
The time to live (TTL) of the SOA record itself.
Link to this property
Link to this property
zone\_mode?: String
Whether the zone mode is a regular or CDN/DNS only zone.
Link to this property
[Link to this property](<#(resource)%20dns.settings.account%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zone_defaults>)
### cloudflare\_account\_dns\_settings
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_account_dns_settings" "example_account_dns_settings" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
enforce_dns_only = false
zone_defaults = {
flatten_all_cnames = false
foundation_dns = false
internal_dns = {
reference_zone_id = "reference_zone_id"
}
multi_provider = false
nameservers = {
type = "cloudflare.standard"
}
ns_ttl = 86400
secondary_overrides = false
soa = {
expire = 604800
min_ttl = 1800
mname = "kristina.ns.cloudflare.com"
refresh = 10000
retry = 2400
rname = "admin.example.com"
ttl = 3600
}
zone_mode = "dns_only"
}
}
```
#### data cloudflare\_account\_dns\_settings
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20dns.settings.account%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>)
##### computed Expand Collapse
enforce\_dns\_only: Bool
When enabled, forces all proxied DNS records in the account to behave as DNS-only at the edge, regardless of each record’s individual proxy setting. Note that this account-level override does not modify the records themselves; it only affects how they are served at the edge. See more on [Enforce DNS-only](https://developers.cloudflare.com/dns/proxy-status/enforce-dns-only).
[Link to this property](<#(resource)%20dns.settings.account%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20enforce_dns_only>)
zone\_defaults: Attributes
Default settings for new zones created in this account.
flatten\_all\_cnames: Bool
Whether to flatten all CNAME records in the zone. Note that, due to DNS limitations, a CNAME record at the zone apex will always be flattened.
Link to this property
Deprecatedfoundation\_dns: Bool
foundation\_dns is deprecated. Use nameservers.type: cloudflare.advanced to turn on Advanced Nameservers and cloudflare.standard to turn it off. This field will be removed in a future API version.
Deprecated. Use nameservers.type to configure Advanced Nameservers.
Link to this property
internal\_dns: Attributes
Settings for this internal zone.
reference\_zone\_id: String
The ID of the zone to fallback to.
Link to this property
Link to this property
multi\_provider: Bool
Whether to enable multi-provider DNS, which causes Cloudflare to activate the zone even when non-Cloudflare NS records exist, and to respect NS records at the zone apex during outbound zone transfers.
Link to this property
nameservers: Attributes
Settings determining the nameservers through which the zone should be available.
type: String
Nameserver type
Link to this property
Link to this property
ns\_ttl: Float64
The time to live (TTL) of the zone’s nameserver (NS) records.
Link to this property
secondary\_overrides: Bool
Allows a Secondary DNS zone to use (proxied) override records and CNAME flattening at the zone apex.
Link to this property
soa: Attributes
Components of the zone’s SOA record.
expire: Float64
Time in seconds of being unable to query the primary server after which secondary servers should stop serving the zone.
Link to this property
min\_ttl: Float64
The time to live (TTL) for negative caching of records within the zone.
Link to this property
mname: String
The primary nameserver, which may be used for outbound zone transfers. If null, a Cloudflare-assigned value will be used.
Link to this property
refresh: Float64
Time in seconds after which secondary servers should re-check the SOA record to see if the zone has been updated.
Link to this property
retry: Float64
Time in seconds after which secondary servers should retry queries after the primary server was unresponsive.
Link to this property
rname: String
The email address of the zone administrator, with the first label representing the local part of the email address.
Link to this property
ttl: Float64
The time to live (TTL) of the SOA record itself.
Link to this property
Link to this property
zone\_mode: String
Whether the zone mode is a regular or CDN/DNS only zone.
Link to this property
[Link to this property](<#(resource)%20dns.settings.account%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zone_defaults>)
### cloudflare\_account\_dns\_settings
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_account_dns_settings" "example_account_dns_settings" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
}
```
#### DNSSettingsAccountViews
#### resource cloudflare\_account\_dns\_settings\_internal\_view
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>)
name: String
The name of the view.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>)
zones: Set\[String]
The list of zones linked to this view.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zones>)
##### computed Expand Collapse
id: String
Identifier.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
created\_time: Time
When the view was created.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_time>)
modified\_time: Time
When the view was last modified.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20modified_time>)
### cloudflare\_account\_dns\_settings\_internal\_view
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_account_dns_settings_internal_view" "example_account_dns_settings_internal_view" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
name = "my view"
zones = ["372e67954025e0ba6aaa6d586b9e0b59"]
}
```
#### data cloudflare\_account\_dns\_settings\_internal\_view
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
view\_id?: String
Identifier.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20view_id>)
filter?: Attributes
direction?: String
Direction to order DNS views in.
Link to this property
match?: String
Whether to match all search requirements or at least one (any). If set to all, acts like a logical AND between filters. If set to any, acts like a logical OR instead.
Link to this property
name?: Attributes
contains?: String
Substring of the DNS view name.
Link to this property
endswith?: String
Suffix of the DNS view name.
Link to this property
exact?: String
Exact value of the DNS view name.
Link to this property
startswith?: String
Prefix of the DNS view name.
Link to this property
Link to this property
order?: String
Field to order DNS views by.
Link to this property
zone\_id?: String
A zone ID that exists in the zones list for the view.
Link to this property
zone\_name?: String
A zone name that exists in the zones list for the view.
Link to this property
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20filter>)
##### computed Expand Collapse
id: String
Identifier.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
created\_time: Time
When the view was created.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_time>)
modified\_time: Time
When the view was last modified.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20modified_time>)
name: String
The name of the view.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>)
zones: Set\[String]
The list of zones linked to this view.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zones>)
### cloudflare\_account\_dns\_settings\_internal\_view
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_account_dns_settings_internal_view" "example_account_dns_settings_internal_view" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
view_id = "023e105f4ecef8ad9ca31a8372d0c353"
}
```
#### data cloudflare\_account\_dns\_settings\_internal\_views
##### required Expand Collapse
account\_id: String
Identifier.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
order?: String
Field to order DNS views by.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20order>)
zone\_id?: String
A zone ID that exists in the zones list for the view.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20zone_id>)
zone\_name?: String
A zone name that exists in the zones list for the view.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20zone_name>)
name?: Attributes
contains?: String
Substring of the DNS view name.
Link to this property
endswith?: String
Suffix of the DNS view name.
Link to this property
exact?: String
Exact value of the DNS view name.
Link to this property
startswith?: String
Prefix of the DNS view name.
Link to this property
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20name>)
direction?: String
Direction to order DNS views in.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20direction>)
match?: String
Whether to match all search requirements or at least one (any). If set to `all`, acts like a logical AND between filters. If set to `any`, acts like a logical OR instead.
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20match>)
max\_items?: Int64
Max items to fetch, default: 1000
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)
##### computed Expand Collapse
result: List\[Attributes]
The items returned by the data source
id: String
Identifier.
Link to this property
created\_time: Time
When the view was created.
Link to this property
modified\_time: Time
When the view was last modified.
Link to this property
name: String
The name of the view.
Link to this property
zones: Set\[String]
The list of zones linked to this view.
Link to this property
[Link to this property](<#(resource)%20dns.settings.account.views%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)
### cloudflare\_account\_dns\_settings\_internal\_views
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_account_dns_settings_internal_views" "example_account_dns_settings_internal_views" {
account_id = "023e105f4ecef8ad9ca31a8372d0c353"
name = {
contains = "view"
endswith = "ew"
exact = "my view"
startswith = "my"
}
order = "name"
zone_id = "ae29bea30e2e427ba9cd8d78b628177b"
zone_name = "www.example.com"
}
```
#### DNSZone TransfersIncoming
#### resource cloudflare\_dns\_zone\_transfers\_incoming
##### required Expand Collapse
zone\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zone_id>)
name: String
Zone name.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>)
peers: Set\[String]
A list of peer tags.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20peers>)
##### optional Expand Collapse
auto\_refresh\_seconds?: Float64
How often should a secondary zone auto refresh regardless of DNS NOTIFY. Not applicable for primary zones.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20auto_refresh_seconds>)
##### computed Expand Collapse
id: String
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
checked\_time: String
The time for a specific event.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20checked_time>)
created\_time: String
The time for a specific event.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_time>)
modified\_time: String
The time for a specific event.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20modified_time>)
soa\_serial: Float64
The serial number of the SOA for the given zone.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20soa_serial>)
### cloudflare\_dns\_zone\_transfers\_incoming
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_dns_zone_transfers_incoming" "example_dns_zone_transfers_incoming" {
zone_id = "269d8f4853475ca241c4e730be286b20"
auto_refresh_seconds = 86400
name = "www.example.com."
peers = ["23ff594956f20c2a721606e94745a8aa", "00920f38ce07c2e2f4df50b1f61d4194"]
}
```
#### data cloudflare\_dns\_zone\_transfers\_incoming
##### required Expand Collapse
zone\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zone_id>)
##### computed Expand Collapse
id: String
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
auto\_refresh\_seconds: Float64
How often should a secondary zone auto refresh regardless of DNS NOTIFY. Not applicable for primary zones.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20auto_refresh_seconds>)
checked\_time: String
The time for a specific event.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20checked_time>)
created\_time: String
The time for a specific event.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_time>)
modified\_time: String
The time for a specific event.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20modified_time>)
name: String
Zone name.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>)
soa\_serial: Float64
The serial number of the SOA for the given zone.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20soa_serial>)
peers: Set\[String]
A list of peer tags.
[Link to this property](<#(resource)%20dns.zone_transfers.incoming%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20peers>)
### cloudflare\_dns\_zone\_transfers\_incoming
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_dns_zone_transfers_incoming" "example_dns_zone_transfers_incoming" {
zone_id = "269d8f4853475ca241c4e730be286b20"
}
```
#### DNSZone TransfersOutgoing
#### resource cloudflare\_dns\_zone\_transfers\_outgoing
##### required Expand Collapse
zone\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20zone_id>)
name: String
Zone name.
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>)
peers: Set\[String]
A list of peer tags.
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20peers>)
##### computed Expand Collapse
id: String
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
checked\_time: String
The time for a specific event.
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20checked_time>)
created\_time: String
The time for a specific event.
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20created_time>)
last\_transferred\_time: String
The time for a specific event.
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20last_transferred_time>)
soa\_serial: Float64
The serial number of the SOA for the given zone.
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20soa_serial>)
### cloudflare\_dns\_zone\_transfers\_outgoing
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_dns_zone_transfers_outgoing" "example_dns_zone_transfers_outgoing" {
zone_id = "269d8f4853475ca241c4e730be286b20"
name = "www.example.com."
peers = ["23ff594956f20c2a721606e94745a8aa", "00920f38ce07c2e2f4df50b1f61d4194"]
}
```
#### data cloudflare\_dns\_zone\_transfers\_outgoing
##### required Expand Collapse
zone\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20zone_id>)
##### computed Expand Collapse
id: String
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
checked\_time: String
The time for a specific event.
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20checked_time>)
created\_time: String
The time for a specific event.
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20created_time>)
last\_transferred\_time: String
The time for a specific event.
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20last_transferred_time>)
name: String
Zone name.
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>)
soa\_serial: Float64
The serial number of the SOA for the given zone.
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20soa_serial>)
peers: Set\[String]
A list of peer tags.
[Link to this property](<#(resource)%20dns.zone_transfers.outgoing%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20peers>)
### cloudflare\_dns\_zone\_transfers\_outgoing
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_dns_zone_transfers_outgoing" "example_dns_zone_transfers_outgoing" {
zone_id = "269d8f4853475ca241c4e730be286b20"
}
```
#### DNSZone TransfersACLs
#### resource cloudflare\_dns\_zone\_transfers\_acl
##### required Expand Collapse
account\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.acls%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>)
ip\_range: String
Allowed IPv4/IPv6 address range of primary or secondary nameservers. This will be applied for the entire account. The IP range is used to allow additional NOTIFY IPs for secondary zones and IPs Cloudflare allows AXFR/IXFR requests from for primary zones. CIDRs are limited to a maximum of /24 for IPv4 and /64 for IPv6 respectively.
[Link to this property](<#(resource)%20dns.zone_transfers.acls%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20ip_range>)
name: String
The name of the acl.
[Link to this property](<#(resource)%20dns.zone_transfers.acls%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>)
##### computed Expand Collapse
id: String
[Link to this property](<#(resource)%20dns.zone_transfers.acls%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
### cloudflare\_dns\_zone\_transfers\_acl
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_dns_zone_transfers_acl" "example_dns_zone_transfers_acl" {
account_id = "01a7362d577a6c3019a474fd6f485823"
ip_range = "192.0.2.53/28"
name = "my-acl-1"
}
```
#### data cloudflare\_dns\_zone\_transfers\_acl
##### required Expand Collapse
acl\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.acls%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20acl_id>)
account\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.acls%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>)
##### computed Expand Collapse
id: String
[Link to this property](<#(resource)%20dns.zone_transfers.acls%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
ip\_range: String
Allowed IPv4/IPv6 address range of primary or secondary nameservers. This will be applied for the entire account. The IP range is used to allow additional NOTIFY IPs for secondary zones and IPs Cloudflare allows AXFR/IXFR requests from for primary zones. CIDRs are limited to a maximum of /24 for IPv4 and /64 for IPv6 respectively.
[Link to this property](<#(resource)%20dns.zone_transfers.acls%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20ip_range>)
name: String
The name of the acl.
[Link to this property](<#(resource)%20dns.zone_transfers.acls%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>)
### cloudflare\_dns\_zone\_transfers\_acl
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_dns_zone_transfers_acl" "example_dns_zone_transfers_acl" {
account_id = "01a7362d577a6c3019a474fd6f485823"
acl_id = "23ff594956f20c2a721606e94745a8aa"
}
```
#### data cloudflare\_dns\_zone\_transfers\_acls
##### required Expand Collapse
account\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.acls%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
max\_items?: Int64
Max items to fetch, default: 1000
[Link to this property](<#(resource)%20dns.zone_transfers.acls%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)
##### computed Expand Collapse
result: List\[Attributes]
The items returned by the data source
id: String
Link to this property
ip\_range: String
Allowed IPv4/IPv6 address range of primary or secondary nameservers. This will be applied for the entire account. The IP range is used to allow additional NOTIFY IPs for secondary zones and IPs Cloudflare allows AXFR/IXFR requests from for primary zones. CIDRs are limited to a maximum of /24 for IPv4 and /64 for IPv6 respectively.
Link to this property
name: String
The name of the acl.
Link to this property
[Link to this property](<#(resource)%20dns.zone_transfers.acls%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)
### cloudflare\_dns\_zone\_transfers\_acls
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_dns_zone_transfers_acls" "example_dns_zone_transfers_acls" {
account_id = "01a7362d577a6c3019a474fd6f485823"
}
```
#### DNSZone TransfersPeers
#### resource cloudflare\_dns\_zone\_transfers\_peer
##### required Expand Collapse
account\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>)
name: String
The name of the peer.
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>)
##### optional Expand Collapse
ip?: String
IPv4/IPv6 address of primary or secondary nameserver, depending on what zone this peer is linked to. For primary zones this IP defines the IP of the secondary nameserver Cloudflare will NOTIFY upon zone changes. For secondary zones this IP defines the IP of the primary nameserver Cloudflare will send AXFR/IXFR requests to.
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20ip>)
ixfr\_enable?: Bool
Enable IXFR transfer protocol, default is AXFR. Only applicable to secondary zones.
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20ixfr_enable>)
port?: Float64
DNS port of primary or secondary nameserver, depending on what zone this peer is linked to.
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20port>)
tsig\_id?: String
TSIG authentication will be used for zone transfer if configured.
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20tsig_id>)
##### computed Expand Collapse
id: String
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
### cloudflare\_dns\_zone\_transfers\_peer
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_dns_zone_transfers_peer" "example_dns_zone_transfers_peer" {
account_id = "01a7362d577a6c3019a474fd6f485823"
name = "my-peer-1"
}
```
#### data cloudflare\_dns\_zone\_transfers\_peer
##### required Expand Collapse
peer\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20peer_id>)
account\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>)
##### computed Expand Collapse
id: String
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
ip: String
IPv4/IPv6 address of primary or secondary nameserver, depending on what zone this peer is linked to. For primary zones this IP defines the IP of the secondary nameserver Cloudflare will NOTIFY upon zone changes. For secondary zones this IP defines the IP of the primary nameserver Cloudflare will send AXFR/IXFR requests to.
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20ip>)
ixfr\_enable: Bool
Enable IXFR transfer protocol, default is AXFR. Only applicable to secondary zones.
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20ixfr_enable>)
name: String
The name of the peer.
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>)
port: Float64
DNS port of primary or secondary nameserver, depending on what zone this peer is linked to.
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20port>)
tsig\_id: String
TSIG authentication will be used for zone transfer if configured.
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20tsig_id>)
### cloudflare\_dns\_zone\_transfers\_peer
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_dns_zone_transfers_peer" "example_dns_zone_transfers_peer" {
account_id = "01a7362d577a6c3019a474fd6f485823"
peer_id = "23ff594956f20c2a721606e94745a8aa"
}
```
#### data cloudflare\_dns\_zone\_transfers\_peers
##### required Expand Collapse
account\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
max\_items?: Int64
Max items to fetch, default: 1000
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)
##### computed Expand Collapse
result: List\[Attributes]
The items returned by the data source
id: String
Link to this property
name: String
The name of the peer.
Link to this property
ip: String
IPv4/IPv6 address of primary or secondary nameserver, depending on what zone this peer is linked to. For primary zones this IP defines the IP of the secondary nameserver Cloudflare will NOTIFY upon zone changes. For secondary zones this IP defines the IP of the primary nameserver Cloudflare will send AXFR/IXFR requests to.
Link to this property
ixfr\_enable: Bool
Enable IXFR transfer protocol, default is AXFR. Only applicable to secondary zones.
Link to this property
port: Float64
DNS port of primary or secondary nameserver, depending on what zone this peer is linked to.
Link to this property
tsig\_id: String
TSIG authentication will be used for zone transfer if configured.
Link to this property
[Link to this property](<#(resource)%20dns.zone_transfers.peers%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)
### cloudflare\_dns\_zone\_transfers\_peers
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_dns_zone_transfers_peers" "example_dns_zone_transfers_peers" {
account_id = "01a7362d577a6c3019a474fd6f485823"
}
```
#### DNSZone TransfersTSIGs
#### resource cloudflare\_dns\_zone\_transfers\_tsig
##### required Expand Collapse
account\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20account_id>)
algo: String
TSIG algorithm.
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20algo>)
name: String
TSIG key name.
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20name>)
secret: String
TSIG secret.
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20secret>)
##### computed Expand Collapse
id: String
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20resource)%20%3E%20(attribute)%20id>)
### cloudflare\_dns\_zone\_transfers\_tsig
Terraform
HTTPTypeScriptPythonGoTerraform
```
resource "cloudflare_dns_zone_transfers_tsig" "example_dns_zone_transfers_tsig" {
account_id = "01a7362d577a6c3019a474fd6f485823"
algo = "hmac-sha512."
name = "tsig.customer.cf."
secret = "caf79a7804b04337c9c66ccd7bef9190a1e1679b5dd03d8aa10f7ad45e1a9dab92b417896c15d4d007c7c14194538d2a5d0feffdecc5a7f0e1c570cfa700837c"
}
```
#### data cloudflare\_dns\_zone\_transfers\_tsig
##### required Expand Collapse
tsig\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20tsig_id>)
account\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20account_id>)
##### computed Expand Collapse
id: String
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20id>)
algo: String
TSIG algorithm.
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20algo>)
name: String
TSIG key name.
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20name>)
secret: String
TSIG secret.
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20datasource-single)%20%3E%20(attribute)%20secret>)
### cloudflare\_dns\_zone\_transfers\_tsig
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_dns_zone_transfers_tsig" "example_dns_zone_transfers_tsig" {
account_id = "01a7362d577a6c3019a474fd6f485823"
tsig_id = "69cd1e104af3e6ed3cb344f263fd0d5a"
}
```
#### data cloudflare\_dns\_zone\_transfers\_tsigs
##### required Expand Collapse
account\_id: String
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20account_id>)
##### optional Expand Collapse
max\_items?: Int64
Max items to fetch, default: 1000
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20max_items>)
##### computed Expand Collapse
result: List\[Attributes]
The items returned by the data source
id: String
Link to this property
algo: String
TSIG algorithm.
Link to this property
name: String
TSIG key name.
Link to this property
secret: String
TSIG secret.
Link to this property
[Link to this property](<#(resource)%20dns.zone_transfers.tsigs%20%3E%20(terraform%20datasource-plural)%20%3E%20(attribute)%20result>)
### cloudflare\_dns\_zone\_transfers\_tsigs
Terraform
HTTPTypeScriptPythonGoTerraform
```
data "cloudflare_dns_zone_transfers_tsigs" "example_dns_zone_transfers_tsigs" {
account_id = "01a7362d577a6c3019a474fd6f485823"
}
```