How to Bind a Custom Domain

Overview

This guide will walk you through the process of adding and configuring custom domains for your Sufy delivery space, including domain addition, DNS resolution configuration, SSL certificate setup, and more. With this guide, you can seamlessly integrate your own domain with Sufy services.

Prerequisites

Before you begin, please ensure you have:

  1. A valid Sufy account
  2. A created delivery space
  3. A registered custom domain
  4. Administrative access to your domain's DNS settings

Detailed Steps

Step 1: Add Custom Domain

  1. Log in to the Sufy Console
  2. Enter the delivery space console
  3. Navigate to "Domain Management"
  4. Click the "Add Custom Domain" button
  5. In the popup form:
    • Enter your custom domain
    • Select SSL certificate configuration options (we strongly recommend using our free SSL certificate)
    • Confirm the configuration details
  6. Click the "Create" button to submit

Domain Management Interface Add Domain Form

Step 2: Configure DNS Resolution

After successful creation, the system will generate corresponding DNS records. You need to add these records at your domain registrar.

DNS Resolution Configuration

Specific steps:

  1. Log in to your domain registrar or DNS service provider's control panel
  2. Locate the DNS settings page for your domain
  3. Add resolution records, noting:
    • Record type: Select CNAME
    • Host record: Fill in according to your domain configuration
    • Record value: Use the CNAME address provided by Sufy
    • TTL: Recommended to set to 600 seconds (10 minutes) or less

Note: If you're using a root domain (e.g., example.com), you may not be able to add a CNAME record directly. In this case, please refer to Why Can't I Add CNAME Records to Root Domains for solutions.

Step 3: Wait for Resolution to Take Effect

DNS resolution requires some time to take effect, a process known as DNS propagation:

  • Typical case: 5-10 minutes
  • Maximum time: 24 hours
  • Recommended waiting time: 15-30 minutes

How to check if resolution is effective:

  1. Use nslookup or dig commands to check DNS resolution
  2. Verify through online DNS checking tools
  3. Monitor domain status changes in the Sufy console

If it's still not effective after 1 hour:

  • Check if DNS records are correctly configured
  • Confirm there are no conflicting DNS records
  • Contact Sufy online support for assistance

Step 4: SSL Certificate Configuration

If you chose to use Sufy's free SSL certificate:

  1. The certificate will be automatically requested and configured
  2. Usually completed within 5-10 minutes

If using your own SSL certificate:

  1. Prepare certificate files (including certificate and private key)
  2. Upload the certificate on the domain management page
  3. Wait for certificate deployment to complete

Step 5: Testing and Verification

After configuration is complete, perform the following tests:

  1. Resource access testing
    • Test specific resources: http://your-domain/resource-path
    • Verify if resources load normally

Common Issues and Solutions

1. DNS Resolution Issues

  • Cannot add CNAME record to root domain

    • Reason: DNS standard limitations
    • Solution: Use DNS provider's CNAME flattening feature or use A records instead

  • DNS resolution not taking effect

    • Checkpoints:
      • Whether DNS records are correctly configured
      • Whether there are caching issues
      • Whether TTL settings are appropriate
    • Solutions:
      • Clear local DNS cache
      • Use multiple DNS checking tools for verification
      • Lower TTL value to speed up effectiveness

2. SSL Certificate Issues

  • Certificate request failure

    • Possible reasons:
      • DNS resolution not effective
    • Solutions:
      • Ensure DNS resolution is correct

  • Certificate shows as insecure

    • Checkpoints:
      • Whether certificate is correctly installed
      • Whether there is mixed content
      • Whether certificate chain is complete

3. Access Issues

  • Domain inaccessible
    • Checklist:
      • Whether DNS resolution is effective
      • Whether SSL certificate is normal
    • Troubleshooting steps:
      • Test connection using curl
      • Check error logs
      • Verify firewall settings
      • Contact support for assistance

Best Practices

  1. DNS Configuration

    • Use shorter TTL values for debugging
    • Extend TTL appropriately after configuration is complete
    • Recommend enabling DNSSEC for enhanced security

  2. SSL Certificates

    • Prioritize using Sufy's free certificates
    • Prepare certificate renewal plans in advance
    • Regularly check certificate status

  3. Monitoring and Maintenance

    • Regularly check domain status
    • Monitor certificate expiration
    • Keep DNS records clear and up-to-date

Getting Help

If you encounter any issues during configuration, you can get help through the following channels:

  1. Check the Help Documentation Center
  2. Contact Sufy online support
  3. Send email to technical support