For DNS, you'll mainly need UDP port 53 (any source, source port 53, protocol UDP).

Repeat the above but use UDP port 53 that should take care of most of DNS (you can also add TCP port 53 for additional DNS traffic).

(Quote)

PS: even if the firewall takes care of related/established connections you would need to at least be able to send and receive dns requests and answers. Had troubles with that lately on a vpn-server ac

Could be a DNS issue: google's domain IP is cached but not others.

(Quote)

I already had 5x vps with virmach and 1 from budgetnode , unfortunately they (virmach) does not support for setting reverse DNS For IPv4 on panel ( this is important for me )

* support for setting reverse DNS For IPv4 on panel (This is Important)

If I am understanding this, you should not have an issue using CF with your own SSL if you are only using their DNS. In fact, I do this all the time. The flow is like this:

If you decide to use only their DNS service you can use whichever TLS cert you want, it won't be different from using any other DNS service (except that they are exceptionally good in the DNS game)

(Quote)

If you are changing providers you will most likely need to setup the new VPS, install the OS and CWP and do an export/backup -> import/restore inside CWP but you will have to deal with DNS chan

* No DNS management

(Quote)

So yes, you are using their CDN, not just DNS.

I use SSL fine; however, you must make sure that you pause the website. Then you must go to dns and make sure that the orange cloud is checked off in order to use it for dns only. That way you are not

(Quote)

If I'm not using their CDN... only using their DNS service, can I then use my own SSL?

Well there is the problem that zone transfers are by default unsigned. While you can solve this with TSIG, I didn't really get how to set this up with PowerDNS in case you are using a supermaster. I f

As of DNS, I use cloudflare (only dns), so, ip change was working in a couple of minutes.