This document describes how to add domain names for resolution in the HTTPDNS console and how to manage those domain names.
Add a domain name
Log on to the EMAS console.
In the left navigation pane, choose HTTPDNS > Resolution Management > Add Domain Name.
Click Add Domain Name. Enter a valid domain name or wildcard domain name, and then click OK.
Examples:
Specific domain name: For example, www.example.com or a.example.com.
Wildcard domain name: such as *.example.com, which matches subdomains such as a.example.com, b.example.com, and a.b.example.com.
Wildcard domain names for top-level domains are not supported, such as *.com, *.cn, and *.net
HTTPDNS supports all domain names, including those registered with Alibaba Cloud DNS, third-party registrars, and international registrars. The use of international domain names must comply with all relevant laws and regulations.
Domain name additions and deletions take effect in about one minute.
Each account can have up to 200 domain name rules.
Any domain name resolution and blacklist for DoH
The DNS over HTTPS (DoH) standard does not include an authentication mechanism. Because DoH often applies system-wide, it is impractical to list every domain name. A whitelist alone cannot meet all security and availability requirements. To prevent threats such as unauthorized usage and support more resolution scenarios, HTTPDNS provides a Resolve all domain names option. You can also use the blacklist feature for fine-grained control.
When you use DoH for resolution, matching order and scope follow these rules:
Requests are first matched against the domain name list (whitelist), and then against the blacklist.
If Resolve all domain names is set to No, only domain names in the domain name list are resolved.
If Resolve all domain names is set to Yes, the domain name list is ignored and all domain names are resolved.
The blacklist has higher priority than the domain name list. If a domain name appears in both the domain name list and the blacklist, the blacklist rule applies and resolution is denied.
Some network libraries or frameworks probe DoH availability using specific domain names. If you allow resolution for only certain domain names, you must add these probe domain names to the resolution whitelist. Otherwise, DoH may not work correctly.
Qt WebEngine and Electron use www.gstatic.com
The CEF framework and Chrome browser use google.com
Delete a domain name
In the domain name list, click Delete to the right of a domain name. Confirm the deletion to remove the domain name rule.
After a domain name rule is deleted, HTTPDNS no longer resolves domain names that match that rule.
After a domain name is deleted, you can recover it only by adding it again.
View domain name data
In the domain name list, click View to the right of a domain name to see its resolution data.
Domain name resolution data is available on a T+1 basis.
