General information about the Web Resources service
The service is designed to work with web resources — any sites or web applications that are accessible via the Internet by domain name.
The service allows you to manage your web resource settings in one section in the control panels: bind domain name to IP address, add subdomains, add a domain name to IP address. TLS(SSL)-certificates for the domain include DDoS protection.
The service supports projects as well as user types and roles.
Principle of operation
A web resource operates on the basis of a domain zone — a set of resource records of a domain. To store resource records, the following is used Selectel DNS hosting.
You create a domain zone in DNS hosting, delegate the domain to our NS servers and create a web resource based on the domain zone. When creating a web resource, you specify the main domain, subdomains, content sources, add a TLS(SSL) certificate. After creating a web resource, you can enable and configure DDoS protection for it.
All resource records that are needed for the site or application to work will be automatically created with the web resource — for example, the A-record that binds the domain name to the IP address of the site.
If you change the settings of the web resource, the records in the domain zone will automatically change.
TLS(SSL) certificates
To work with certificates, the following is used secret manager You can issue free Let's Encrypt® certificates and add your own certificates. A TLS(SSL)-certificate is added when you create a web resource.
Let's Encrypt certificates are automatically reissued when they expire. You need to reissue your own certificate yourself.
In order for the site to open over HTTPS, you need to install the certificate yourself on your web server and replace it in time when it is reissued.
DDoS protection
Protection against DDoS attacks operates at L7 level. The protection can be enabled by resource creation or incorporate after creation.
When protection is enabled, the web resource is allocated a secure IP address, which is automatically registered in the A-record in the domain zone. Incoming traffic is redirected to the protected address, where it is analyzed and cleaned, and then the cleaned traffic is sent to the content source.
Statistics on incoming and cleared traffic are not available.
You can additionally customize protection:
- set up a redirect to HTTPS;
- to limit access by country;
- completely allow traffic from certain IP addresses;
- completely block traffic from certain IP addresses.
Cost
The Web Resources service is in beta-testing stage and is provided free of charge. We will warn you about the end of beta testing in advance.