Zum Inhalt springen
GigadriveDocs

DNS records

Which DNS records you create to serve an application on Gigadrive Network, for gigadrive.app URLs and for a domain you own.

You create no DNS records to serve an application on Gigadrive Network. Every generated URL lives in a zone the platform operates, so there is nothing to add at your registrar and nothing to keep in sync.

AddressRecords you createZone operator
my-app.gigadrive.appNoneGigadrive Network
my-app-git-feature-login.gigadrive.appNoneGigadrive Network
my-app-abc12345.gigadrive.appNoneGigadrive Network
A domain you ownTXT and CNAMEYou

Why there is nothing to add

A wildcard CNAME in the gigadrive.app zone sends every label under the apex to the edge. One of the Deployment URLs therefore resolves as soon as it is created, and whether it answers depends on the deployment behind it rather than on a record reaching a resolver. There is no propagation wait between a deployment finishing and its URL working.

Two things are worth knowing if you are filling in a security questionnaire. The zone is DNSSEC signed. And a CAA record at the apex restricts certificate issuance for the zone, including the wildcard, to Let's Encrypt, which SSL certificates covers in more detail.

Records for a domain you own

A custom domain needs a TXT record that proves you control the domain, and a record that sends traffic to Gigadrive Network. The console and the API list the exact names and values for your domain.

RecordNameValueWhen
TXT_gigadrive-challengegigadrive-verification= plus tokenOnce per domain
CNAMEThe subdomain, for example shopcname.gigadrive-dns.netFor each subdomain you attach
ALIAS@cname.gigadrive-dns.netFor the apex, such as example.com

The TXT record verifies the whole domain for your organization, so attaching api.example.com after shop.example.com needs only its CNAME. Each verified domain has its own token. Leave the TXT record in place after verification.

Apex records at common providers

The apex cannot hold a CNAME, so it needs the flattening record your provider offers:

  • Cloudflare: a CNAME at @ is flattened automatically. Set its proxy status to DNS only, because a proxied record hides Gigadrive Network from the certificate authority.
  • DNSimple, NS1, and other providers with ALIAS or ANAME records: use that record.
  • Amazon Route 53: its alias records only point at AWS resources, so they cannot target Gigadrive Network. Attach www.example.com instead and redirect the apex to it.
  • Providers without flattening: attach www.example.com instead and redirect the apex to it at your provider.

Records that block a domain

  • Proxied records: a record behind a proxy, such as the Cloudflare orange cloud, never reaches Gigadrive Network. Switch it to DNS only.
  • Leftover records: remove old A and AAAA records for the hostname. A mix of old and new addresses sends some visitors elsewhere.
  • CAA records: if the domain has any, one must allow letsencrypt.org. CAA records on a custom domain lists the parameters that still block issuance.