DocsICP FilingConsole
Documentation
Home Page Microservices Engine User Guide Cloud-native gateways Route management Domain names Create a domain name

Create a domain name

Updated at:
Copy as MD
Product
My Favorites

Cloud-native Gateway provides multi-domain name management, which lets you manage protocols, certificates, and routing configurations for different domain names. The gateway also supports wildcard domains. For example, if you bind the wildcard domain *.hello.com, you can access the gateway using subdomains such as 1.hello.com and 2.hello.com.

Prerequisites

You must complete the ICP filing for your domain names.

Note

For Chinese mainland regions, you must obtain an ICP filing for your domain name through Alibaba Cloud or add Alibaba Cloud as a service provider to your existing ICP filing. For regions outside the Chinese mainland, no ICP filing is required.

Procedure

  1. Log on to the MSE console. In the top navigation bar, select a region.

  2. In the left-side navigation pane, choose Cloud-native Gateway > Gateways. On the Gateways page, click the ID of the gateway.

  3. In the left-side navigation pane, click Routes. Then, click the Domain tab.

  4. Click Add Domain Name. In the Add Domain Name panel, configure the parameters and then click OK.

    Parameter

    Description

    Domain Name

    Enter a fully qualified domain name, such as hello.com, or a wildcard domain, such as *.hello.com. This lets you independently manage protocols, certificates, and routing configurations for the domain name, isolating it from others.

    Important

    A wildcard domain such as *.hello.com can match subdomains such as a.hello.com, b.hello.com, and even multi-level subdomains like a.b.hello.com. However, a wildcard certificate for *.hello.com covers only single-level subdomains like a.hello.com and b.hello.com, and does not cover multi-level subdomains like a.b.hello.com.

    Protocol

    Select HTTP or HTTPS.

    If you set Protocol to HTTPS, you must also configure the following parameters.

    Certificate

    Select a certificate from Alibaba Cloud Certificate Management Service to use with the HTTPS protocol.

    Note

    If you have not purchased or uploaded an SSL certificate, click Purchase/Upload Certificate to go to the Certificate Management Service console. For more information, see Purchase an SSL certificate.

    Note

    The certificate drop-down list calls the ListSSLCert API, which returns a maximum of 1,000 certificates per call. If the number of SSL certificates in your account exceeds 1,000, the drop-down list may not display all certificates. In this case, you can call the AddGatewayDomain API and directly specify the certificate ID (CertIdentifier) to bind a domain name, without selecting a certificate from the console drop-down list. For more information, see the AddGatewayDomain API documentation.

    Always Use HTTPS

    When enabled, this option redirects all HTTP requests to HTTPS. The gateway then serves traffic only on the HTTPS port.

    HTTP/2

    Determines whether to use HTTP/2 during the TLS handshake using Application-Layer Protocol Negotiation (ALPN).

    • Use global configuration: Determines whether the current domain name uses HTTP/2 based on the value of EnableHttp2 in the parameter configuration, and dynamically follows the value of EnableHttp2 in the parameter configuration.

    • Enable: The domain name uses the HTTP/2 protocol after a successful TLS handshake.

    • Disable: The domain name does not use the HTTP/2 protocol after a successful TLS handshake.

    Note

    For HTTP connections, the gateway automatically uses the HTTP Upgrade mechanism to upgrade the connection to HTTP/2 if requested by the client. Therefore, this setting applies only to the HTTPS protocol.

    TLS Version

    Defines the range of TLS versions allowed for this domain name.

    • Minimum Version: The minimum TLS version allowed for this domain name. The default is TLS 1.0.

    • Maximum Version: The maximum TLS version allowed for this domain name. The default is TLS 1.2.

Domain name configuration on Cloud-native Gateway is used only for route matching and does not automatically create a DNS resolution record in Alibaba Cloud DNS. To resolve the domain name to the public endpoint of the gateway, you must manually add an A record in the Alibaba Cloud DNS console. You can find the public endpoint on the Access Point tab of the Basic Overview page of the gateway instance.

Verify the results

Make sure that an accessible routing rule is configured for a path under this domain name. For more information, see Create a routing rule.

  • If the public DNS record for your domain name has propagated, you can verify the configuration by accessing the domain name in a web browser.

  • If you have not configured DNS resolution for your domain name, you can verify the configuration using the following method. For example, if your domain name is hello.com, replace {public IP} in the following command with your gateway's public IP address.

    • Verify HTTP

      curl http://hello.com --resolve "hello.com:80:{public IP}"

    • Verify HTTPS

      curl -v -k https://hello.com --resolve "hello.com:443:{public IP}" --cacert my-cert.pem
Previous：Enable domain-level WAF protectionNext：Delete a domain name