One network, sitting between your visitors and your origin. Every request passes through this same layered path, in this order, before it ever reaches your infrastructure. We'll walk each layer live — this is just the map first.
The difference is whether Cloudflare becomes your authoritative DNS provider — the system that holds the real, final answer for every query about your domain — or just proxies specific hostnames while someone else stays authoritative.
"Encrypted" isn't one thing — these are four genuinely different postures between the edge and your origin.