The only type of records that you do not proxy through Cloudflare are MX records and domains that receive mail.
To decide which records pass through the Cloudflare network, ask yourself what kind of content appears on the subdomain. You should enable Cloudflare for any subdomain that gets web traffic. You should not enable Cloudflare for subdomains that handle non-web traffic, such as mail, ftp, or ssh.