Domain types and how to register them
فارسی
It means you want to use your server directly (for normal use). In fact, this domain name (subdomain) directly points to the IP address of the server. That is, if you ping it, the IP of the server will be answered.
It means you are using your server behind a CDN provider. In other words, you register your domain (subdomain) with a CDN provider and then proxy it. Here we discuss how to register on cloudflare. If you want to see a tutorial on how to use GCore CDN on a Cloudflare registered domain, see this link.
This domain is used when you want to use intermediate servers to send user traffic. For example, you have a server in Iran and you have registered a domain (subdomain) for it. You can register this domain in this section so that the relevant settings are applied in the configurations. More information
This domain is used to use the Header trick. A fake domain is used to bypass the SNI whitelist proxy. In this case, you can see the configurations related to this trick by defining this domain. If you use this trick, there is a possibility that the server will be filtered.
Now that we are familiar with the types of domains, how to register these domains will be checked
You can register the direct domain in several ways.
Using sites that offer free subdomains: afarid is recommended. A number of public domains have already been registered on this site. You can register your desired subdomain on these domains. For this, you must first create a profile from here. A real email is required.
After that, the list of domains registered on this site can be seen from here. You can choose one of the domains that has fewer hosts. Note that the domain must be public. It is recommended to use .com, .org, .net domains.
After buying the domain, you can use the sites that provide DNS services. e.g. Cloudflare
First, you register using this link.
Log in after creating a profile. You must add your domain here. For this, click on Add Site button and add your domain.
In the next step, choose your desired plan. The free plan is enough for this. So you choose according to the photo.
In the next step, we do next according to the figure.
In the last step, put the given DNS servers in your domain settings.
Wait a while to register the domain settings. After that, the domain will be activated on the Cloudflare server.
Now you need to go to the registration section of DNS records.
In this case, to record records related to IP version 4, follow the figure.
After clicking on Add record, register the details of the desired subdomain by entering the server IP. Note that the proxy must be turned off for the direct domain.
If needed, you can change the TTL from automatic mode. The lower this value is; DNS records cached on the user's system are refreshed sooner.
To record the records related to IP version 6 of the server, follow the figure.
All the things mentioned about IP version 4 also apply in this case. The only difference is the record type, which is AAAA.
The easiest test to ensure domain registration is to use the ping command. Thus, in a terminal, if the desired domain is pinged, the above registered IP must appear in the response. Usually, the DNS record registration process takes some time. More advanced tools such as nslookup and dig can also be used for this test. If you need more information, you can read this article.
This domain is registered behind the servers of a CDN provider or so-called proxy. For this, the services of one of these sites should be used. ### CDN domain registration in Cloudflare For example, you can use Cloudflare service. So after following the steps mentioned above; Your domain was activated on the site; You should go to the DNS section and register the desired record. This record is type A for IP version 4 and type AAAA for IP version 6. The only difference with the previous step is that you must turn on the proxy.
When you test this domain using various tools such as ping, nslookup, dig; In response, one of the IPs randomly assigned by Cloudflare will return to your domain and there is no more information about your IP. This provides a level of security for your server.
It should be noted that this IP changes in different periods of time and is not fixed. Sometimes it happens that the IP assigned by Cloudflare is blocked or disrupted in Iran, and in this regard, methods to bypass this type of filtering should be used.
TLS is an algorithm that encrypts all internet traffic and helps the user stay safe online.
to describe precisely; TLS encrypts the communication between the client and the server in the web platform, which uses a set of cryptographic algorithms such as alpn, uTLS, allowInsecure.
Certificates assigned to domains are also based on the TLS protocol.
To do this, go to the SSL/TLS section on the Cloudflare site and set the certificate mode to Full.
Also, activate the SSL/TLS Recommender option to increase connection security. This option checks the connection and gives you security suggestions if it is possible to upgrade the TLS version.
Then go to the Network menu. Here you should check that QUIC, gRPC and WebSockets options are enabled.
Checking security status of CDN domain traffic To do this, go to the SSL/TLS section of the Cloudflare site. A graph is displayed for passing traffic, the more traffic passed based on the higher version TLS; Communication security has been higher. http traffic passes without using TLS encryption.
In fact, it is a direct domain that is considered for intermediate servers, and therefore the way to register such domains is the same as the direct domain.
As the name suggests, we want to use a fake domain that is not related to us, so we don't need to register it in advance. But we can only use it in the panel. Click here to see the article on registering and using fake domains.