Stratus - DNS & SSL Guides on Webscale Product Documentation

Stratus Guides - DNS Recommendations

Mon, 01 Jan 0001 00:00:00 +0000

With Webscale STRATUS, there are three options for configuring your DNS.

Preferred — [Route 53][12] is provided with Webscale STRATUS and can host domains through the STRATUS DNS management system. Domains configured using the MageMojo Route 53 instance are pointed to a CloudFront distribution directly and will take full advanted of CloudFront Global Edge Node caching.
Acceptable — DNS solutions that support CNAME ALIAS for flattening may be used. This method is supported by Cloudflare as well as Route 53. When using Cloudflare do not use the Cloudflare CDN alongside STRATUS.
For Temporary Use Only — A DNS A record may be used to point to a particular CloudFront edge note. However, this IP is very likely to change and would require updates to A records. This method is not supported or guaranteed to work.

NOTE: Free Let’s Encrypt SSL Certificates provided by Webscale will only work with the Preferred method.

Stratus Guides - Sucuri DNS Setup

Mon, 01 Jan 0001 00:00:00 +0000

While entering a domain, there will be no need to select the other options provided. Click Add Site to add the domain to Sucuri.

Sucuri will automatically grab the IP address for a specific CloudFront edge server. While workable, it does introduce a single point of failure. To avoid this, provide Sucuri with the CNAME for the CloudFront Endpoint. This can be retrieved from the DNS panel of STRATUS.

Stratus Guides - Cloudflare DNS Setup

Mon, 01 Jan 0001 00:00:00 +0000

NOTE: when using Cloudflare for DNS, Webscale cannot assign or install a Let’s Encrypt certificate; LE certficates can only be installed when using the Webscale Route 53 nameservers. Furthermore, certificates issued and signed by Cloudflare cannot be installed on Webscale STRATUS. Certificates must be issued by a publicly trusted Certificate Authority (CA), such as ACM or those listed by the Mozilla Foundation . For more information, see [“Continually Enhancing Domain Security on Amazon CloudFront”][3].