General information about the Web Resources service
The service is designed to work with web resources — any sites or web applications that are accessible via the Internet by domain name.
The service allows you to manage web resource settings in one section in the control panel: bind domain name to IP-address, add subdomains, add TLS(SSL)-certificates for the domain, enable DDoS protection.
The service supports projects as well as user types and roles.
Principle of operation
The web resource operates on the basis of a domain zone — a set of resource records of a domain. Selectel DNS hosting is used to store resource records.
You create a domain zone in DNS-hosting, delegate the domain to our NS-servers and create a web resource based on the domain zone.When creating a web resource you specify the main domain, subdomains, content sources, add TLS(SSL)-certificate.After creating a web resource you can enable and configure DDoS protection for it.
All resource records that are needed for the site or application to work will be automatically created with the web resource — for example, the A-record that binds the domain name to the IP address of the site.
If you change the settings of the web resource, the records in the domain zone will automatically change.
TLS(SSL) certificates
You can issue free Let's Encrypt® certificates and add your own certificates. A TLS(SSL)-certificate is added when you create a web resource.
Let's Encrypt certificates are automatically reissued when they expire. You need to reissue your own certificate yourself.
In order for the site to open over HTTPS, you need to install the certificate yourself on your web server and replace it in time when it is reissued.
DDoS protection
DDoS protection works at the L7 level. The protection can be enabled when creating a resource or enabled after creation.
When protection is enabled, the web resource is allocated a secure IP address, which is automatically written in the A-record in the domain zone.Incoming traffic is redirected to the secure address, where it is analyzed and cleaned, then the cleaned traffic is sent to the source of content.
Statistics on incoming and cleared traffic are not available.
You can further customize the protection:
- set up a redirect to HTTPS;
- to limit access by country;
- completely allow traffic from certain IP addresses;
- completely block traffic from certain IP addresses.
Cost
The Web Resources service is in beta-testing stage and is provided free of charge.We will warn you about the end of beta-testing in advance.