domains
|
|
| Panel and API |
https://domains.xvii.network (/api/v1) |
| Name servers |
xvii-node dns https://domains.xvii.network TOKEN on two servers |
What it does
- Two providers: a team's Cloudflare account (token sealed), or zones on the instance's own name
servers with records kept here (A, AAAA, CNAME, TXT, MX, NS, SRV, CAA).
- Import from Cloudflare when moving a zone onto xvii's name servers.
- Attach a name to a pages alias, an app, a status page, share links, an analytics dashboard, a hooks
endpoint, a tunnel name or mail's hosts: the record, the service and the certificate in one step.
- Name servers pull zones every five seconds with their own tokens and keep answering when the control
plane is away; superusers hear when one stops.
- Cache and protection per name: shared caching, rate and connection limits, bans, under-attack mode.
- DNSSEC for own zones: ECDSA P-256 keys, DS checked at the parent every ten minutes.
- Front: every name the platform doesn't own reaches domains, which approves its certificate and
passes it to the service that serves it.
Limits and events
Limits domains.zones, domains.attachments. Events zone.delegated, zone.signed,
zone.dnssec_mismatch, nameserver.stale.
Custom domains