Hot answers tagged

31

You can't. ELB provides one -- or more -- IP addresses, hiding behind the CNAME you are using with www record, and these addresses are not static, so you can't create an A record at the top ("apex") of your domain and point to the addresses... along with that, a CNAME at the apex of a domain is not a valid DNS configuration. So there isn't directly a way ...


23

Your hosting provider who owns the IP sets the PTR record for it. There is nothing to do in the DNS zone editor for your domain. I have just done it. My hosting provider (digitalocean) automatically created PTR record when I named the host, it just needed to be the full name, ending with the domain. I added the IP in Godaddy's DNS editor. Now nslookup ...


14

If I'm not mistaken, the problem is that your registrar has published DS records for your domain - that is, DNSSEC signing keys: [me@risby player]$ dig ds ultreyatours.com [...] ;; ANSWER SECTION: ultreyatours.com. 85920 IN DS 49864 8 1 0152C1213569799FAFA42C7699A20132A293F908 ultreyatours.com. 85920 IN DS 20536 8 1 ...


12

gd_bundle-g2-g1.crt: Go Daddy Certificate Bundles - G2 With Cross to G1, includes Root gdig2.crt: Go Daddy Secure Server Certificate (Intermediate Certificate) - G2 2b9918dccf2f1d.crt: Your certificate Source: https://certs.godaddy.com/anonymous/repository.pki


8

In addition to the accepted answer, another option is to create an AWS hosted zone in AWS Route 53 following the steps below: Sign in to the AWS Management Console and open the Amazon Route 53 console at https://console.aws.amazon.com/route53/. Choose Create Hosted Zone. You'll need to ensure your hosted zone points to your loadbalancer. To do this, create ...


7

You want to use a CNAME record, something like my.web.thingy.org CNAME my-loadbalancer-1234567890.us-west-2.elb.amazonaws.com. http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/using-domain-names-with-elb.html [Edit; response to comment]: There is no need for you to set any A record. You just point your name to the ELB name ...


6

As far as I know the majority (all maybe?) of the SSL providers do not add the old certificate to a Certificate Revocation List nor will they respond negatively to an OCPS request when a certificate renewal is requested. In other words, the current certificate will remain valid and you have until the time it expires to roll out the new certificate, ...


6

What you want is called virtual hosting. And it works much better than what you described! Just add multiple server blocks with different server_name and root directories. One server block per domain name. Note that only one of them can be marked as default_server but apart from that all blocks can look identical. The best way to do this is by creating one ...


5

You appear to have configured multiple A records. The domain points at both 184.168.221.55 (GoDaddy) and 94.23.211.117 (OVH). Delete the GoDaddy record and you should be fine (note: DNS gets cached, so it may take a few minutes to a few hours for it to stop happening). Right now, you've accidentally implemented http://en.wikipedia.org/wiki/Round-robin_DNS.


5

You can achieve this easily using server blocks in Nginx to create multiple 'virtual hosts', each with a different HTTP configuration. This works by Nginx processing your request differently depending on which URL you used to reach the server. Put simply, to reach siteone.com you need to create a server block with a server_name value of siteone.com. Each ...


5

You'll want to replace the two GoDaddy nameservers with the four Route53 ones. To prevent downtime, ensure you have the same records in both GoDaddy and Route53 before making the nameserver changes.


5

The PTR record (also called reverse DNS record) is not located in the domain's zone but in the ARPA's zone, as it relates to the IP address, not the domain name. That record needs to be created by your SMTP server's ISP for its static IP address. That is not something done through Cloudflare, which would be impossible since the IP addresses they use are ...


5

This behavior sounds a lot like an HSTS (https://en.m.wikipedia.org/wiki/HTTP_Strict_Transport_Security) header was set for the domain. The good news is that you can simply stop applying it and the effects will eventually go away. The bad news is that it’s usually set to at least six months, and the only way to stop it earlier is to have all clients clear ...


4

This client does not recognize the certificate as a valid one. Godaddy intermediate certificates have to be included in the file loaded by the "crt". Check that the whole certificate chain is properly included in the server's certificate: crt /etc/haproxy/cert.key From haproxy documentation for the "crt" keyword: Some CAs (such as Godaddy) offer a ...


4

problem is that when you renewed the certificate, you accepted the default encryption method of SHA2 which is not supported properly yet. Needed to switch it to SHA1. SHA1 used to be the default but has recently changed. Something to be aware of going forward. by default, godaddy now issues certificates in the higher new format. You can re-issue the ...


4

According to WPEngine, you just need a CNAME record pointing at your wpengine address. See this for instructions (directly from WPEngine, actually).


4

You're prematurely optimizing. Do you really think DNS lookups are the slowest part of your entire website? I just did some tests against my own Wordpress site. The DNS lookup took 0.008s, while retrieving the actual body of the page took 0.072s. Pulling down the page is nine times slower, and my web server is cached by Varnish and using a static site ...


4

Recently switched from GoDaddy (was a client for almost 5 years of their DNS and domain registration services) to Route 53. Why GoDaddy was better for me than Route53: they do not charge you for DNS queries; they provide a free mail forwarding service. That's it. Now why Route53 is better than GoDaddy: a better UI (GoDaddy's UI is really confusing); API;...


4

I do not agree that this is a bad idea, it's no different from any other complex domain name. However, you will need to have multiple DNS zones which would be operating system dependent. I was able to successfully achieve this on a VPS running cPanel using the following steps: Have a control panel for each subdomain (these do not need to be on the same ...


4

You can use openssl's x509 subcommand: openssl x509 -subject -issuer -noout -in cert.pem and check the output. Should be self explanatory. An example: $ openssl x509 -noout -issuer -subject -in gd-class2-root.crt issuer= /C=US/O=The Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority subject= /C=US/O=The Go Daddy Group, Inc./OU=Go Daddy ...


4

There's nothing wrong with your DNS: [me@risby ~]$ dig www.raotechsolutions.com [...] ;; QUESTION SECTION: ;www.raotechsolutions.com. IN A ;; ANSWER SECTION: www.raotechsolutions.com. 570 IN A 23.229.190.135 and [me@risby ~]$ dig foo.raotechsolutions.com [...] ;; QUESTION SECTION: ;foo.raotechsolutions.com. IN A ;; ...


4

You should get the UCC SAN certificate as GoDaddy suggests. You need AT LEAST two FQDNs - autodiscover.domain.com and mail.domain.com. Never had an issue with Godaddy certs.


4

If you delegate nameservers then the full setup belongs to the delegated nameservers (hostgator in your setup) and they will need to setup MX records for you. As, from your description it looks like a minimal setup, I would suggest you not to delegate nameservers but to setup A / CNAME records for your website and configure the remaining MX records as usual....


4

As you are using this SMTP server for outgoing mail, configure authenticated Message Submission (RFC 6409) to port 587 with STARTTLS (or SMTPS to port 465). You should be able to use this from almost anywhere where the SMTP port 25 is blocked because the connection is not intended to be used for hosting a mail server. This doesn't affect SMTP connections out ...


4

There are two areas in question in Route 53. You’ve referred to the “Hosted Zones” but you did not refer to the “Registered Domains” section. This can be seen in your screenshot. When you transfer a domain, the nameserver settings are typically transferred as well. This prevents an outage on your website when the transfer takes place. However, I’m pretty ...


4

AWS Route53 pricing is public, but AWS pricing can be confusing. There are two separate DNS functions, which can be separated: Domain registration DNS service Domain registration AWS charges $12 per year for a .com registration (link may change - use the link above in the "domain names" section). That's just for having the domain name. DNS Service This ...


3

SSL certificates are tied to a particular domain, so no to #1. 2 works nicely as an option. A UCC/SAN certificate is just an SSL certificate with multiple valid domain names in it (called Subject Alternative Names). UCC/SAN is what I use for our Amazon AWS load balancer and it works nicely. The only downside of such a certificate is that it shows the other ...


3

On a VPS you can't set up NTP as it uses the system clock of the main machine running the VPS Do you mean specifically on GD's service? because as a rule that's simply not the case, there's nothing to stop any VM using NTP properly. As I say GD may have that as a rule but if so then that's very odd and would also negate any discussion with them about NTP.


3

No, because: and the DNS will route the traffic accordingly? DNS does not route. Never. DNS answers "where is this domain" with an IP. What you ask for is basically a reverse IP NAT; check your firewall / router documentation.


Only top voted, non community-wiki answers of a minimum length are eligible