Member Avatar for s.w.a

please i want a help to understand that statement:

Access node’s DNS record should have CNAME entries equal to the number of protected
websites’ domain names. The entry format should have the access-node ID as a sub-domain
for each protected website domain name, i.e., “”, this is to guarantee
compatibility with SSL, where wildcard certificates must be used by the protected web
servers. Access-node health information must be sent to the trusted public servers
periodically, or on the event of an abnormal event (i.e., access-node under sudden attack).

please for any help i am very thanks
regards
sarah

  • 2 Contributors
  • 2 Replies
  • 90 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by s.w.a

Dani AI

Generated

Short answer for : this is a DNS + TLS architecture topic, not a CSS issue — was right about that. The statement you posted describes an aliasing pattern so protected site names resolve through a per-access-node identity, and it ties into how TLS is handled and how the provider detects node failures.

A few concrete DNS facts to clear up the wording: a CNAME makes one name an alias of another (lookups follow the alias to the canonical name). You cannot place a CNAME at a zone apex and a name that is a CNAME cannot also have other records (MX, SOA, etc.). For readable background see Cloudflare’s CNAME explanation: What is a CNAME record?.

Why do providers ask for per-site CNAMEs? Commonly each protected domain (or a chosen subdomain) is aliased into the provider’s namespace so the provider can route traffic via an access node. That creates two TLS options: (1) the access node terminates TLS and must present a certificate matching the client’s hostname (SNI lets one server present many certs), or (2) the access node does TCP/SNI passthrough and the origin server presents the cert. SNI details and limitations are explained here: . If the origin is expected to serve many subdomains, wildcard certificates are one approach (see Let’s Encrypt wildcard notes: ).

Operational tips: coordinate changes with the domain owner (they must add the CNAME or ALIAS), use ALIAS/ANAME or A records for apex names, keep TTLs low during testing, automate certificate issuance if the provider terminates TLS (ACME), and implement health checks plus a DNS update/traffic failover plan since DNS caching limits how fast you can switch nodes.

Recommended Answers

All 2 Replies

Member Avatar for kidwon

This isn't CSS matter this is a host problem!
You should contact the service provider.

Member Avatar for s.w.a

thank u very much for reply
sorry but that is from my study,i want to understand it to be able to understand what all the project is,
i have nerrow information about DNS, i want to know what is that mean, how the DNS records arranged, and what exactly happen here by the statement i sent

thank you very much in advance for any help
best regards

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.