DNS specification
DNS and domain technical specification
DNS connects the domain to web, email, verification and security services. It should be managed deliberately because careless record changes can interrupt more than the website.
Common record types
Records are added only when required by the chosen services.
- A and AAAA
- CNAME
- MX
- TXT
- CAA where appropriate
- Verification records
- Redirect/edge routing configuration
Email-related DNS
Business email commonly requires multiple independent DNS records.
- MX routing
- SPF
- DKIM
- DMARC
- Provider verification
- Autodiscovery records where required
Website security
Domain configuration can also support secure website delivery.
- TLS certificate validation
- DNSSEC capability where appropriate
- Cloudflare proxy/edge configuration
- Canonical host redirects
Technology
Infrastructure, delivery and operations
Production sites can combine global edge services with conventional cloud/server infrastructure according to the workload.
Full text list
- Cloudflare — Global edge delivery, DNS, CDN, TLS, DDoS protection, WAF, rate limiting, Workers and storage services. Provider information
- Hetzner — Cloud and dedicated compute, networking, storage and conventional server workloads. Provider information
- Linux — Production server operating systems and secure service hosting. Provider information
- Docker — Portable containers for applications, services and controlled deployment. Provider information
- PostgreSQL — Production relational data storage for applications and services. Provider information
- GitHub — Source control, deployment history and auditable delivery workflows. Provider information
- Node.js — JavaScript runtime for APIs, tooling and server-side applications. Provider information
- Nginx — Web serving and reverse-proxy capability where conventional servers are appropriate. Provider information
Technology
Google search, measurement and business services
Search, analytics, advertising and business services work best when the website is structured and measured properly.
Full text list
- Google Search Console — Indexing, crawl visibility, search queries, coverage and site health. Provider information
- Google Analytics — Traffic, engagement and conversion measurement. Provider information
- Google Tag Manager — Controlled deployment of measurement and conversion tags. Provider information
- Google Workspace — Business Gmail, Drive, Calendar, Meet and productivity services. Provider information
- Google Ads — Paid search, conversion tracking and campaign measurement. Provider information
- PageSpeed Insights — Performance and Core Web Vitals diagnostics. Provider information
- Google Business Profile — Local business visibility and public business information. Provider information
- Google Merchant Center — Product feeds and shopping visibility where relevant. Provider information
Need the simple version?
The detailed pages exist for customers who want to inspect the engineering. The customer-facing offer remains deliberately straightforward.
