I had the DNS records on the server, with A names for NS1 and NS2. Then the nameservers at the registrar pointed to ns1/ns2.mydomain.com. Standard, I think.
In order to use Ezoic, they copy the DNS records from the server to their end, and I had to change the nameservers to point to the ones they supplied. So now DNS is hosted on their end. I see now that they use Cloudflare.
After changing the nameservers at the registrar, I found that I can't get to mydomain.com/cpanel or mydomain.com:2083. But I CAN get to server.mydomain.com/whm and server.mydomain.com:2087.
Yesterday, when I tried to go to cPanel the browser would run forever before giving me an ERR_CONNECTION_TIMED_OUT. Today it's showing me the Cloudflare version of "Connection timed out", with error code 522. From their timeout page:
An Error 522 means that the request was able to connect to your web server, but that the request didn't finish.
The only thing I changed was the nameservers at the registrar, so something somewhere along the way has to be blocking their IP from accessing the port.