That means you have CloudFlare's DNS Proxy (orange cloud) activated. When a record is orange clouded, it means traffic to that hostname is running through CloudFlare. That includes
- Masking your IP
- SSL certificates on the edge servers (you still need a GridPane SSL, which must be provisioned BEFORE you set orange cloud proxy)
Only A, AAAA, and CNAME records can be orange clouded. Below shows what orange cloud records look like on your CloudFlare dashboard. The sub1.sub2 record has proxy turned on, staging does not.