DNS Configuration (Business License)
This guide explains how to configure DNS for your WhautoChat deployment, enabling you to use a custom domain and improve security with best practices.
Why Use Cloudflare?
We highly recommend using Cloudflare as your DNS provider. Cloudflare offers security features at the DNS level, acts as a reverse proxy to hide your server's real IP, and makes it easy to install rate limiting rules and a Web Application Firewall (WAF) on your domain. This setup helps keep bad actors away and protects your deployment from attacks.
- Enable TLS for DNS-to-internet security. SSL certificates (via Let's Encrypt) will be installed during the application installation step.
- Highly recommend a WAF between your server and end user for additional protection. Cloudflare makes this easy to configure.
Required DNS Records
Before installing WhautoChat, you must create the following 4 DNS records:
Type | Name | Value (Points to) | Purpose |
---|---|---|---|
A | core.yourcompany.com | [Your Server Public IP] | Backend core API |
A | ws.yourcompany.com | [Your Server Public IP] | Websocket server |
A | app.yourcompany.com | [Your Server Public IP] | Main app for end users |
A | live.yourcompany.com | [Your Server Public IP] | LiveChat for website visitors |
- Replace
[Your Server Public IP]
with the actual IP address of your cloud instance.
Step 1: Choose Your Domain
- Decide on the domain or subdomain (e.g.,
chat.yourcompany.com
) you want to use for your WhautoChat instance. - Register your domain with a reputable provider if you haven’t already.
Step 2: Update DNS Records
- Log in to your DNS provider’s dashboard (e.g., Cloudflare, GoDaddy, Namecheap, AWS Route 53).
- Create or update the records listed above.
Step 3: Propagate DNS Changes
- DNS changes can take up to 24 hours to propagate, but often update within an hour.
- Use tools like whatsmydns.net to check propagation.
Step 4: Enable SSL/TLS (Recommended)
- Enable TLS at the DNS provider level (e.g., Cloudflare Full SSL).
- SSL certificates for your domains will be automatically installed using Let's Encrypt during the application installation steps.
- This ensures all traffic to your WhautoChat instance is encrypted.
Step 5: Security Best Practices
- Use a reputable DNS provider with DDoS protection (e.g., Cloudflare).
- Install rate limiting rules and a WAF on your domain.
- Enable DNSSEC if available.
- Regularly review and restrict DNS record access.
Optional: Advanced DNS Setup
- For multi-region or high-availability deployments, consider using DNS load balancing or failover features.
- Set up SPF, DKIM, and DMARC records if you plan to send emails from your domain.
Need more help? Refer to your DNS provider’s documentation or contact your IT administrator.