Alternative Option to Domain Delegation

While domain delegation is our recommended method for using Surfly Public Cloud from your own domain, we understand that it may not always be feasible for everyone. In such cases, we offer an alternative solution, although it is not our preferred approach.

If domain delegation is not suitable for your needs, you have the option to provide us with the required SSL certificates and create DNS records to point your chosen subdomain to Surfly servers. However, keep in mind that this alternative may limit your ability to leverage our global cloud's failover capabilities (depending on your DNS provider, more details below under requirements), and you'll need to provide valid SSL certificates annually.

To implement this alternative option, please follow these steps:

• SSL Certificate Requirements:

  • Provide us with a file containing the complete certificate chain and private key, valid for both domainname.com and *.domainname.com

  • Make sure that the certificate is in *.pem format and has the following structure:

    CODE

    -----BEGIN RSA PRIVATE KEY-----
        (Your Private Key)
    -----END RSA PRIVATE KEY-----
    
    -----BEGIN CERTIFICATE-----
        (Your Primary SSL certificate)
    -----END CERTIFICATE-----
    
    -----BEGIN CERTIFICATE-----
        (Your Intermediate certificate)
    -----END CERTIFICATE-----
    
    -----BEGIN CERTIFICATE-----
        (Your Root certificate)
    -----END CERTIFICATE-----

  • Ensure the certificate is valid for a year.

• Create DNS Records:

  • Configure DNS records to direct your subdomain to Surfly servers.

    • Create a CNAME record ”*“ pointing to surfly.com

    • Create a ANAME record “" pointing to surfly.com

    • If your DNS provider does not support ANAME records, you can alternatively create an

      • A record pointing to any regional Surfly IP address. (Refer to the list of static regional Surfly IP addresses at https://surfly.com/v2/servers/)

      • If you are going to create A record, we recommend pointing it to the main server in Germany for stability reasons.

We offer the capability to securely bind your domain to your Surfly account(s), guaranteeing that only authorised users can utilise this domain. This ensures a private and protected association, eliminating concerns about other entities accessing your domain on Surfly's public cloud.