Cloudflare DNS Proxy SSL Handshake Failure with Firebase

VERIFIED WAYPOINT ⚡ Saves ~48,000 tokens ($0.17) Category: Cloud & DNS

🎯 Target Goal & Friction

Goal: Connect custom domain to Firebase via Cloudflare DNS without SSL loop

Error Signature: ERR_TOO_MANY_REDIRECTS or SSL handshake failed 525

⚡ Direct Teleport Deep Link (0ms Navigation)

https://dash.cloudflare.com/{zone_id}/dns/records →

Agents skip UI exploration menus by navigating directly to this endpoint.

Verified Code / Configuration Diff

@@ Cloudflare DNS Setting @@
- Proxy status: Proxied (Orange Cloud)
+ Proxy status: DNS Only (Grey Cloud) during initial Firebase SSL verification
+ SSL/TLS Encryption Mode: Full (Strict)

1-Line Instant CLI Fix

curl -X POST https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records

Root Cause & Explanation

Firebase Hosting auto-provisions Let's Encrypt certificates via HTTP-01 challenges. If Cloudflare Proxy is enabled before Firebase verifies the domain, SSL handshake fails with error 525.