51 votes
Accepted

Do I need a separate SSL certificate for a DNS redirect?

The certificate name must match what the user entered in the browser, not the 'final' DNS record. If the user enters docs.tenantcompany.com then your SSL certificate has to cover that. If docs....
Jason Martin's user avatar
  • 5,093
51 votes
Accepted

Adding both CNAME and TXT DNS records for one subdomain

You can't. As RFC1034 says in s3.6.2, If a CNAME RR is present at a node, no other data should be present If you want a TXT record for (say) www.example.com, you can't have a CNAME for www.example....
MadHatter's user avatar
  • 80.4k
31 votes

Do I need a separate SSL certificate for a DNS redirect?

Jason's answer is correct. But just to clarify terms a bit here, "DNS redirect" is a bit of a misnomer. DNS has CNAME records (a.k.a. aliases) which is a name pointing to another name. But it's not a ...
Ryan Bolger's user avatar
  • 16.8k
27 votes
Accepted

CNAME with S3 buckets

In the past S3 supported FQDN bucket names - i.e. exactly what you needed. Where FQDN = Fully Qualified Domain Name, i.e. full host name like static.mypage.com. The problem is that this only works ...
MLu's user avatar
  • 25.3k
18 votes
Accepted

SSL encryption with CNAME redirect

I think you're confusing terms a little bit. A CNAME is not a redirect per se. It's just a record type in DNS, also known as a DNS alias. The DNS protocol is ultimately about mapping names to IP ...
Ryan Bolger's user avatar
  • 16.8k
16 votes

Having Multiple CNAMEs

Is this kind of multi level CNAME a bad design in general ? CNAME to CNAME chains are not forbidden but as you already experience it is not a very robust solution. Each additional CNAME increases ...
HBruijn's user avatar
  • 80k
15 votes
Accepted

CAA and CNAME together

CAA records are supposed to follow CNAMEs, so you need a CAA record for the target of the CNAME record instead. Citing https://letsencrypt.org/docs/caa/ CAA validation follows CNAMEs, like all ...
Sven's user avatar
  • 99.3k
14 votes

Resolve a domain name to CNAME alias locally using dnsmasq

You can add the following to your configuration file in dnsmasq: cname=somedomain.com,some-balancer-1213231237.ap-southeast-2.elb.amazonaws.com as specified in the man page: --cname=<cname>,[&...
Tommiie's user avatar
  • 5,657
14 votes
Accepted

Using a CNAME record to redirect a subdomain to another website?

CNAMES are not redirections, they are aliases. CNAME also includes all other resource records such as A,MX,TXT. so if you query for an A record, the cname will send you to the A record of it's alias....
Jacob Evans's user avatar
  • 7,976
14 votes
Accepted

record DKIM on IONOS makes sense?

it is IONOS who signs those emails, right? It would be, if they signed them. But they don't. (But they should.) Here are some excerpts of a conversation I had less than 10 minutes ago with their ...
JamesTheAwesomeDude's user avatar
13 votes

Having Multiple CNAMEs

HBrujin is correct, but in truth recursion depth is a lot worse than anything dig +trace is going to show you. Recursion depth is something that often gets sneered at and over-trivialized, but those ...
Andrew B's user avatar
  • 32.9k
12 votes

What's the difference between `dig` and `host` when querying a specific name-server?

If you're using the non-FQDN hostname, the results can be different because host will use the search domains in resolv.conf, whereas dig does not by default. You have to use the +search option if you ...
wisbucky's user avatar
  • 1,109
12 votes
Accepted

Published SRV records pointing to CNAME alias in violation of RFC 2782?

The Wikipedia article you are quoting reports what the relevant RFC 2782 for SRV records states: Target The domain name of the target host. There MUST be one or more address records for this ...
Massimo's user avatar
  • 71.1k
12 votes
Accepted

Changing A record and CNAME records

As mentioned in the comments, you will need to use A records instead of CNAME records. CNAME records will not be able to point at an IP Address. The key to making each of the sites to work is to ...
Dre's user avatar
  • 1,750
12 votes
Accepted

Using a CNAME record with www

Barring unusual behavior from a web-browser or poorly coded application, there's nothing special about the www domain. I would suggest looking for a new DNS provider if they're willing to change DNS ...
Andrew's user avatar
  • 2,172
11 votes

Changing A record and CNAME records

Use A record to point to the sub domains myurl.com. A 300 123.123.123.123 api.myurl.com. A 300 123.123.123.123 app.myurl.com. A 300 123.123.123.123 preview.myurl.com. A 300 123.123.123....
Anthony Fornito's user avatar
10 votes

Why can't a CNAME record be used at the apex (aka root) of a domain?

June 2022 Update New SVCB and HTTPS resource records enable aliasing of apex domains and facilitate lookups for connecting to services like HTTP origins. Many DNS providers and browsers already ...
Daniel Liuzzi's user avatar
10 votes

Do I need a separate SSL certificate for a DNS redirect?

I wanted to understand if I my tenant company has a wildcard SSL certificate, will it work with this setup or a new SSL certificate has to be purchased for docs.tenantcompany.com? Short answer: No. ...
Cosmic Ossifrage's user avatar
9 votes

What does the TTL on a CNAME record mean?

All you CNAME records will be cached for a maximum of 3600, 10800 and 21600 seconds. The A records are handled independently and will be queried again every 60 seconds. However, in case the CNAME ...
Xavier Nicollet's user avatar
8 votes

CNAME record/alias in windows hosts file?

PowerDNS is not supported on Windows. I would recommend a tool such as "SimpleDNS" (14 day Trial) or "Technitium DNS Server" (free) which can be used to create a simple local DNS server. Once you ...
Brett Larson's user avatar
7 votes
Accepted

Cloudflare integration with Azure websites

The DNS settings for your website in Cloudflare allow you to proxy traffic so that requests to example.com and www.example.com will be protected. You do not control azurewebsites.net though so you ...
Mani Gandham's user avatar
7 votes

How to do "dynamic apex" right in DNS/BIND?

I'm the guy who wrote the Q&A that was linked to in the comments, so suffice it to say I've spent some time studying the brain damage surrounding attempts to "make this work". This is basically a ...
Andrew B's user avatar
  • 32.9k
7 votes
Accepted

Can a CNAME record point to a domain handled by another DNS server?

Is it fine that dns.aisp.net is not the authoritative domain server for bbbbbbbb.com pointed to by the CNAME record, and contains no information about bbbbbbbb.com or www.bbbbbbbb.com? Yes. This ...
Rex's user avatar
  • 7,895
7 votes
Accepted

DNS to direct url with path to another domain

This cannot be done with DNS. This must be done with URL rewrites in your HTTP server. If you don't have access to any configuration settings for your web server, you're out of luck.
Wesley's user avatar
  • 32.8k
7 votes

CNAME working - but not for directories

It's not DNS CNAME problem. DNS only help clients to resolve IP from FQDN. If virtual host root works, then IP resolving works fine. You need to check you web server configuration, and web server ...
Slipeer's user avatar
  • 3,305
7 votes

Adding both CNAME and TXT DNS records for one subdomain

A workaround would be to use an ALIAS record if your registrar supports it. It is a type of records that provides CNAME-like behavior on apex domains. Read more: https://support.dnsimple.com/articles/...
Brendan Nee's user avatar
6 votes

SSL certificate for CNAME redirected domain

There being a CNAME record rather than a direct address record (A/AAAA) is not a factor. The certificate verification is based on the hostname in the location URL. For navigating to https://example....
Håkan Lindqvist's user avatar
6 votes

A records and CNAME records

You will likely run into the same problem with CNAME records. Your best long-term solution is to continue using NetSol as a registrar, but move your DNS services elsewhere, to somewhere without ...
EEAA's user avatar
  • 110k
6 votes

How to redirect domain A to domain B using A-Records and CNAME records only

If you really wanted to redirect a domain with only DNS records and are OK with third-party services, you may use forwarddomain.net. It works by setting your source domain (e.g. www.olddomain.com) ...
willnode's user avatar
  • 216
6 votes
Accepted

DNS CNAME Resolution - which IP would be returned?

You'd get: an.example.com. IN MX 10 pc2.an.example.com pc2.an.example.com. IN CNAME pc1.an.example.com. pc1.an.example.com. IN A 123.45.67.2 There can't exists another resourse record like A or ...
Esa Jokinen's user avatar
  • 49.4k

Only top scored, non community-wiki answers of a minimum length are eligible