We're using Google App Engine for a service of our app.
We've set up the service on a custom sub-domain (eg service.myapp.com), while doing so, Google prompted us to
Update your DNS records to enable security
What's confusing me about this is:
- We've already set up the CNAME to point to the app on the subdomain
- The record's that google is suggesting would seem to modify our main domain (myapp.com) rather than the subdomain (service.myapp.com)
Here's what google suggested:
Type Data Alias A 188.8.131.52 A 184.108.40.206 A 220.127.116.11 A 18.104.22.168 AAAA 2001:4860:4802:32::15 AAAA 2001:4860:4802:34::15 AAAA 2001:4860:4802:36::15 AAAA 2001:4860:4802:38::15 CNAME ghs.googlehosted.com service
The last one seems to make sense, but all the rest I would think would break our app by pointing the main domain to google (where it is NOT hosted), no?
I did try adding the A and AAAA records for host, but it was disallowed because the CNAME is already set up (We're using Amazon Route 53):
RRSet of type A with DNS name communications.raisely.io. is not permitted because a conflicting RRSet of type CNAME with the same DNS name already exists in zone myapp.com.
The host is working with SSL and without the A or AAAA records (just the CNAME), so it seems like these aren't necessary.