Skip to content

[SE-5070] fix: apply workaround for CloudFlare proxied domain check

Boros Gábor requested to merge gabor/fix-domain-reg-issues into master

Description

This PR ensures that users registered with CloudFlare (and using DNS proxying) can still set custom domain names without assistance.

Supporting information

Ocim is validating domain/subdomain setup by looking into the DNS records of the given domain. This probably works for most of the domain names (as we experience it), though in some cases (like CF proxied domains) it fails and will never work.

What are proxied domains? Basically a DoT (DNS over TLS) setup for the given DNS record (in this case a CNAME) that gives possibility for the end users to be saved from DDOS attacks as the attack would hit CF name servers instead of the server the record pointing to (a.k.a OpenCraft edX app server).

Couldn't the users simply turn of proxying? They could and the DNS resolution should start working almost immediately. Do we or the user want to disable it? Obviously no. This is good for us and them too – we are not hit directly in case of a DDOS.

Dependencies

N/A

Testing instructions

  1. Register as a client
  2. Go to setting custom domains on the client console
  3. Try the domain mentioned in the related ticket

Deadline

ASAP

Merge request reports