Registering a domain and setting up DNS feels simple until you're 6 months in and your emails are bouncing because SPF records are misconfigured. DNS is the plumbing of the internet — get it right once, and you never think about it again. Get it wrong, and every email goes to spam while your site loads at half speed.
This is the AU business domain playbook. Register .au or .com.au with an auDA-accredited registrar, move DNS to Cloudflare (free, global, fast), configure email routing (Google Workspace or Microsoft 365), and lock down deliverability with SPF/DKIM/DMARC. Nothing fancy. Just the right way.
Why DNS Matters More Than You Think
Your domain registrar and your DNS provider don't have to be the same thing. Most small businesses don't realise this — they register at GoDaddy or VentraIP and assume the nameservers stay there forever. That's fine, but it means you're stuck with their DNS editor (usually slow), their support (slow), and their uptime (slower). Cloudflare's nameservers are global, cached, and run on hardware designed for scale. Moving DNS to Cloudflare costs nothing and makes your site snappier.
Plus, when you separate registration from DNS, you lock down your domain. The registrar can't hold your DNS hostage. You move your records to a new registrar without touching your live site. It's the single best thing you can do for long-term domain security.
Step 1: Register with an auDA-Accredited Registrar
.au and .com.au domains must go through an auDA-accredited registrar. VentraIP and Synergy are the big two in Australia — both fast, both have solid tools. Register your domain there. The registration step takes 5 minutes. Leave the default nameservers pointing at their DNS service for now — we'll change it next.
Step 2: Move DNS to Cloudflare
Sign up for Cloudflare (free tier is plenty). Add your domain. Cloudflare gives you two nameservers (something like `ns1.cloudflare.com` and `ns2.cloudflare.com`). Copy those. Go back to VentraIP or Synergy, edit the domain, paste Cloudflare's nameservers into the Custom Nameservers field, and save. DNS propagation takes 24–48 hours but usually settles in 2–4 hours. Check at dnschecker.org to confirm.
From now on, you manage DNS via Cloudflare. All records live there — A records for your site, MX records for email, TXT records for verification. The registrar becomes the domain owner contact only. You never log into VentraIP's DNS editor again.
Step 3: Point Your Site
Add an A record or CNAME in Cloudflare pointing to your hosting. If you're on Netlify (default for Velocity X sites), add a CNAME from `www` to your Netlify URL and an A record from the root (@) to Netlify's IP. Cloudflare's docs are clear — it's three clicks.
Step 4: Email Setup (MX + SPF + DKIM + DMARC)
Use Google Workspace or Microsoft 365 for email (Google is simpler, cheaper). Both provide MX records you paste into Cloudflare. An MX record tells the internet: "For mail to this domain, go to Google's servers."
Then add SPF (Sender Policy Framework): a TXT record saying "only these servers can send email from this domain". Copy Google's SPF string, paste it into a TXT record at `@`.
{`TXT @ "v=spf1 include:_spf.google.com ~all"`}DKIM (DomainKeys Identified Mail) adds a cryptographic signature to outbound mail. Google generates a DKIM key — you add a CNAME to Cloudflare that points to Google's DKIM server. DMARC (Domain-based Message Authentication) is a TXT record that tells email servers: "If SPF and DKIM both fail, quarantine or reject." This is the seal on top.
{`TXT _dmarc "v=DMARC1; p=quarantine; rua=mailto:postmaster@yourdomain.com.au"`}Add all four (MX, SPF, DKIM, DMARC) and your emails will land in inboxes, not spam. Cloudflare's UI is clear — it takes 20 minutes total.
Step 5: Lock It Down (Security Record)
Optional but smart: add a CAA (Certification Authority Authorization) record. It says: "Only these CAs can issue SSL certs for this domain." Prevents someone from maliciously ordering a cert elsewhere.
{`CAA @ 0 issue "letsencrypt.org"`}Frequently Asked Questions
Will moving DNS break my site?
No. You point Cloudflare's nameservers at the registrar, Cloudflare copies your DNS records from the old provider, and your site stays live. The propagation window is where old caches refresh to the new servers — there's technically a tiny window of inconsistency, but in practice, zero downtime.
Do I need to move hosting too?
Nope. DNS and hosting are separate. You can host on Netlify and use Cloudflare for DNS. Your registrar lives at VentraIP. All three talk to each other via DNS records. Totally fine.
How much does Cloudflare cost?
The free tier is enough for 99% of sites. Unlimited DNS records, global CDN, DDoS protection, free SSL. No credit card required. Pay only if you want advanced features (Cloudflare Pro, $20/mo, adds Analytics Engine, WAF, more rules). Most Aussie businesses use free forever.
What if I want to change registrars later?
Painless. Your DNS is at Cloudflare, not the registrar. Move to a new registrar, point its nameservers at Cloudflare, and your site keeps running. The registrar is just the owner contact. Having separated it from DNS means you're never locked in.
How do I test SPF/DKIM/DMARC?
Send a test email to a Gmail address. Open it, click the three dots, select "Show original", and scroll. Gmail shows SPF, DKIM, and DMARC pass/fail right there. Tools like MXToolbox.com also let you look up records live and run diagnostics.
What about DNSSEC?
DNSSEC is DNS security — it signs your records cryptographically so attackers can't hijack them. Cloudflare offers it free, but most AU SMBs skip it. Nice-to-have, not load-bearing. If you're paranoid (good instinct), flip it on in Cloudflare Settings.
The Bottom Line
Register .au/.com.au at VentraIP or Synergy. Move DNS to Cloudflare (free, global, fast). Add MX + SPF + DKIM + DMARC. Lock it down with CAA. Total time: 1 hour, one-time setup. Your domain is now portable, your DNS is snappy, and your emails land in inboxes. This is the AU business playbook for 2026.
Once you've got infrastructure right, everything else gets faster — see how at /pricing. And if your transactional email is still held together with string and prayers, read about email routing with Resend to finish the job.