Custom Domains & SSL
Every project deployed on Exovon receives a free, secure *.exovon.co.in edge subdomain immediately. You can also map custom branded domains (e.g. app.yourcompany.com or apex yourcompany.com) with automated Enterprise SSL certificates powered by our global Anycast edge network.
Step-by-Step Configuration Guide
Add Your Domain in Exovon Console
Navigate to your project's dashboard, click the Domains tab, enter your custom domain name (e.g. app.mydomain.com or mydomain.com), and click Add Domain.
Configure DNS Records at Your Registrar
Log in to your DNS provider (Cloudflare, GoDaddy, Namecheap, Route 53, etc.) and add the two required DNS records provided in your Exovon console:
| Target Scope | Record Type | Host / Name | Target / Value | TTL |
|---|---|---|---|---|
Subdomain (e.g. app) | CNAME | app (or www) | router.exovon.co.in | Auto / 300s |
| Apex / Root (Universal A Record) | A | @ (or blank) | 172.67.182.1 (backup: 104.21.70.1) | Auto / 300s |
| Apex / Root (Alternative) | ALIAS / CNAME Flattening | @ (or blank) | router.exovon.co.in | Auto / 300s |
| SSL Verification Challenge | TXT | _exovon-challenge (.sub for subdomains) | [token-from-dashboard] | Auto / 300s |
Automated Certificate Validation & Activation
Once your DNS records propagate (typically 2 to 10 minutes), our edge network validates the TXT token and automatically provisions a dedicated Enterprise TLS 1.3 certificate. Traffic routing switches seamlessly to active status with zero downtime.
Subdomain vs. Apex (Root) Domain Configuration
Standard DNS specifications (RFC 1034 / RFC 1912 §2.4) strictly prohibit standard CNAME records on root/apex domains (yourcompany.com) because a CNAME cannot coexist with mandatory root records such as SOA, NS, or MX.
Universally supported across 100% of DNS registrars via standard CNAME. Set Host to your subdomain name (app or www) and Target to router.exovon.co.in.
For universal support across all registrars (GoDaddy, Namecheap, Google Domains), add an A Record pointing @ to 172.67.182.1 (backup: 104.21.70.1). Alternatively, if your DNS provider supports CNAME Flattening (Cloudflare) or ALIAS (Route 53, DNSimple), point @ to router.exovon.co.in.
90-Day Auto-Renewal
Certificates automatically renew 30 days prior to expiration via background HTTP-01/DNS-01 ACME challenges. Zero human intervention or downtime required.
TLS 1.3 & HTTP/3 QUIC
Every provisioned certificate enforces TLS 1.3, modern ECDSA/RSA cipher suites, OCSP stapling, and automatic HTTP/2 and HTTP/3 QUIC protocol negotiation.
Anycast Propagation
SSL handshakes terminate at the nearest Anycast edge node (including Mumbai & Singapore), reducing TLS handshake latency to <15ms.
If your domain DNS is managed by Cloudflare, setting the CNAME record to Proxied (Orange Cloud) can cause an ERR_TOO_MANY_REDIRECTS loop because Cloudflare attempts to proxy traffic into another Cloudflare edge node.
Recommended Solution:
- Set your CNAME record to DNS Only (Grey Cloud) in your Cloudflare DNS panel.
- If you require the Orange Cloud proxy, ensure your Cloudflare SSL/TLS encryption mode is set to Full (Strict) rather than Flexible.
Verifying DNS Propagation via Terminal
You can inspect whether your DNS records have propagated globally using standard terminal diagnostic utilities:
# 1. Verify CNAME or ALIAS routing to Exovon Anycast Edge
dig CNAME app.yourdomain.com +short
# Expected output: custom.exovon.co.in.
# 2. Verify TXT verification token
dig TXT _cf-custom-hostname.app.yourdomain.com +short
# Expected output: "[your-unique-32-char-token]"
# 3. Test TLS 1.3 handshake and certificate issuer
curl -Iv https://app.yourdomain.com 2>&1 | grep -E "SSL certificate|HTTP/"Frequently Asked Questions
How long does custom domain verification take?
Most DNS providers propagate records within 2 to 15 minutes. Once the DNS records are visible globally, Exovon activates your domain and issues the SSL certificate within 60 seconds.
Are SSL certificates renewed automatically?
Yes. Exovon manages automated 90-day renewal cycles for all active custom domains with zero downtime or intervention required.
Can I use wildcard domains (e.g. *.mydomain.com)?
Custom wildcard domains (*.yourdomain.com) are supported on Heavy and Enterprise tier workspaces. Add *.yourdomain.com in the Domains tab and configure a wildcard CNAME record pointing to your assigned edge hostname.