3 ms·
If you use Cloudflare nameservers, you have to change to new nameservers, wait for that to propogate, and then wait for clients cached records TTLs to expire. S
by morpheuskafka 7y ago
If you use Cloudflare nameservers, you have to change to new nameservers, wait for that to propogate, and then wait for clients cached records TTLs to expire. So it will be a major disruption no matter what you do.
- apple4ever 7y agoWhat about the API? If that is up, you could script it.
- manigandham 7y agoIf you're using them for TLS certs then it's an even bigger problem unless you have them provisioned elsewhere.
- morpheuskafka 7y agoUnless you need EV you can just pull some wildcards from Lets Encrpt (as long as you don't use pubkey pinning). No need to automate as it's just a one off.
- bowmessage 7y agoCan you use your own nameservers that delegate to cloudflare or akami 50% each, then adjust? Is there a service more suited for this than r53?