Wildcard proxy for everyone
May 3, 2022Hannes Gerhart

Summary
This post announces the general availability of wildcard DNS record proxying for all Cloudflare plan levels, previously an Enterprise-only feature. It details the functionality of wildcard DNS records, including their behavior with deeper levels and specific record overrides, referencing RFC4592. The post explains how proxying wildcard records enables Cloudflare's features (Caching, Firewall, Workers) to be applied to all subdomains and highlights the automatic TLS certificate issuance for wildcard subdomains.
More from the DNS Infrastructure & Naming Conventions trail
- The keys to the Internet change on October 11, 2026. Are you ready?
- 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
- How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
- BGP ORIGIN attribute manipulation and its impact on the Internet
- Cloudflare Internal DNS is now generally available