DC CORE

Appearance

Domain Routing & SNI ​

Domain Routing & SNI is where DC CORE connects a customer domain to one of our secure routed services. It is used to validate the domain, issue and manage certificates, and define how traffic is routed through the platform we run.

This view gives you the key details needed to confirm that a domain is active, the certificate is valid, and the routing configuration is correct.

Domain Status ​

The Domain Status panel shows the current state of the domain.

Key Fields ​

  • Name: the domain being managed.
  • Description: a short label for the domain.
  • ACME Status: whether certificate validation has succeeded.
  • Current State: the current status of the domain.
  • Validation Time: when the domain was last validated.
  • Last Error: the most recent validation or routing error.
  • Key Rotation Pending: whether a key rotation is waiting.

What It Means ​

  • Validated means the domain has been confirmed and currently has an active certificate on record.
  • Pending means validation or rotation is still in progress.
  • Rejected or any error state should be checked using diagnostics.

Certificate Status ​

The Certificate Status panel shows the current certificate details for the domain.

Key Fields ​

  • Issued: when the certificate was issued.
  • Expires: when the certificate expires.
  • Days Remaining: how long remains before renewal.
  • Certificate Record: the stored certificate reference.
  • Challenge Type: the ACME validation type in use.
  • TXT Record Ready: whether the TXT record is ready for validation.

Why It Matters ​

This section confirms whether the domain certificate is active and when it will need renewal. If validation fails, this is where you confirm whether the TXT challenge and certificate state are correct.

Ingress CNAME Target ​

The Ingress CNAME Target section provides the DNS values required to point the domain into DC CORE.

Key Fields ​

  • Relay Ingress Zone: the ingress region being used.
  • CNAME Name: the full domain name to configure.
  • CNAME Host: the host label for the DNS record.
  • CNAME Target: the DC CORE ingress target host.

How To Use It ​

Use the CNAME values exactly as shown in your DNS provider. Once the record is in place and DNS has propagated, DC CORE can validate the domain and attach the correct certificate.

The copy buttons next to each value make it easy to enter the DNS record without mistakes.

DNS TXT Record Instructions ​

The DNS-01 TXT Record Instructions section is used to verify domain ownership.

What It Shows ​

  • Validation status.
  • TXT record readiness.
  • DNS challenge information.

Why It Matters ​

DC CORE uses the TXT record to confirm that you control the domain. If the record is missing or incorrect, validation will fail and the domain will not move to an active state.

Routing Details ​

The Routing Details panel shows the destination used by the domain route.

Key Fields ​

  • Target Device: the device receiving traffic.
  • Target IP: the target IP address.
  • Target Port: the destination port.
  • Routing Type: the routing mode in use.
  • Relay Ingress: the ingress region or relay path.

Why It Matters ​

This is the final destination for the routed domain. If the domain validates but traffic does not reach the service, these values are the first ones to check.

Diagnostics ​

The Diagnostics view gives you a deeper look at domain lookup and certificate behaviour.

Lookup Diagnostics ​

This section shows:

  • Domain.
  • Last Polled.
  • Poll Interval.

Use it to confirm that the domain is being checked on the expected interval.

Latest Auth / TLS Logs ​

This table shows the latest lookup results for authentication and TLS checks.

Log Panels ​

  • Auth Last Log.
  • TLS Last Log.

If a lookup is rejected, these logs help identify whether the issue is related to auth, TLS, or DNS validation.

Available Actions ​

Show Routing Object ​

Opens the routing object so you can inspect the underlying routing configuration.

Diagnostics ​

Opens the diagnostics panel for lookup, auth, and TLS details.

Mark For Key Rotation ​

Flags the domain so the key can be rotated when needed.

Force Renewal ​

Forces a new certificate renewal cycle before expiry.

Troubleshooting ​

Domain Shows Rejected ​

If the domain is rejected:

  • Check the CNAME record.
  • Check the TXT record.
  • Confirm DNS has propagated.
  • Review the routing target and ingress zone.

Certificate Is Missing or Expired ​

If the certificate is missing or expired:

  • Check the certificate status panel.
  • Confirm the TXT challenge is correct.
  • Use Force Renewal if needed.
  • Make sure the domain still points to the correct target.

Routing Does Not Reach the Service ​

If the domain validates but traffic does not arrive:

  • Verify the target device.
  • Confirm the target IP and port.
  • Review the routing type.
  • Open diagnostics and check the auth/TLS logs.

Best Practices ​

  • Confirm the domain is validated before using it in production.
  • Use the copy buttons to avoid DNS mistakes.
  • Review certificate expiry regularly.
  • Keep routing details aligned with the service target.
  • Use diagnostics whenever a domain stops resolving or becomes unreachable.

Summary ​

Domain Routing & SNI connects a customer domain to one of our secure routed services through DC CORE’s routing layer. It shows domain validation, certificate health, DNS instructions, routing details, and diagnostics so you can manage the domain confidently and troubleshoot issues quickly.