DOCUMENTATION / START BUILDING

Start with a domain. Build from there.

This guide explains the DNS, origin, TLS and security setup process for WAFGO. Use the actual parameters assigned by the service team or console.

ONBOARDING GUIDES

Find the next step for your task.

Understand a configuration before changing it. These guides cover domain preparation, connection checks and policy rollout.

Domains and configuration

Confirm ownership, origin details and the requirements for DNS setup.

DNS

Transport and verification

Check HTTPS, certificate hostnames and the connections between clients and origins.

TLS

Policies and rollout

Separate static and dynamic requests, then validate caching and security rules in stages.

WAF

Before you begin

You need permission to manage the domain, modify DNS, configure the origin and manage certificates. The checks below do not replace your assigned service details.

SETUP WORKFLOW

01 / Confirm your domain and origin

List your domains, origin IP addresses or hostnames, ports and protocols. Check that the origin returns the expected content for the intended Host. Record existing DNS and certificate settings for rollback.

Configuration notes

Validate with a test domain first. Do not point a production domain at an unverified target, or include keys and origin credentials in public support requests.

SETUP WORKFLOW

02 / Configure DNS

After creating the domain service configuration, use its officially assigned CNAME target. Never infer a destination from another customer or a demo. Apex CNAME/ALIAS support depends on your DNS provider.

Local verification commands

nslookup -type=CNAME wafgo.com

dig +short CNAME wafgo.com

Configuration notes

The query below only checks current resolution. Replace the domain with your actual hostname and compare the result with your assigned target after propagation.

SETUP WORKFLOW

03 / Check HTTPS and origin transport

Client-to-edge and edge-to-origin are separate connections. Both should use correct certificates and hostname verification. Check that HTTPS redirects do not create a loop.

Local verification commands

curl -I https://wafgo.com

openssl s_client -connect wafgo.com:443 \
  -servername wafgo.com -verify_return_error </dev/null

Configuration notes

Review expiration, domain matching, the complete certificate chain and origin SNI/Host. Never put private keys in frontend code or public configuration.

SETUP WORKFLOW

04 / Begin with conservative policies

Cache static assets while preserving correct isolation for logins, payments and personalized content. Validate security policies against test traffic or in observation mode before enabling blocking.

Configuration notes

Evaluate admin paths, APIs and pages separately. Keep trusted-source exceptions narrowly scoped, with an expiry and a review process.

SETUP WORKFLOW

05 / Verify, observe and iterate

Check access, status codes, caching and security events from your primary user regions. Watch for origin errors, false positives, caching leaks and certificate failures. Use your recorded rollback process when needed.

Configuration notes

Before launch, confirm alert delivery, responsible owners, operational permissions and support channels. Measure performance using your actual business workload.

Your pre-launch checklist

DNS destination matches the assigned service details
Dynamic and personalized content cannot be cached incorrectly
Client and origin TLS verification succeeds
Security policies are tested and rollback is ready
Critical application journeys pass end-to-end checks

Planning an automated integration?

This page covers onboarding and verification. Ask the service team for the official API documentation, including endpoints, authentication, permissions and available operations, before integrating.

Ask about API documentation

All products

Explore further

Technical academy

All resources

Understand the network behind your content

Build practical knowledge of CDN, DNS, HTTP, security, streaming and edge computing for website delivery and troubleshooting.

How a CDN delivers content

Learn how CDN cache hits, origin requests, cache keys and updates work, and how to separate reusable assets from personalized responses.

How DNS connects a hostname to a service

Understand authoritative and recursive DNS, common records and TTLs, with practical checks for domain onboarding and migrations.

Read HTTP requests and responses

Understand HTTP methods, status codes, caching headers and content negotiation when diagnosing redirects, caching and origin requests.

Understand performance through the network path

Distinguish bandwidth, latency, packet loss and throughput, and see how routing affects websites and downloads.

Build manageable layers of website protection

Understand the roles of DDoS protection, WAF, access control and TLS, and tune policies with observation and limited-scope validation.

Understand HLS, DASH and video delivery

Learn about segments, manifests, adaptive bitrate and playback authorization when planning caching and validation for video.

What belongs at the edge

Distinguish edge caching, policy rules and programmable compute, and assess latency, state, execution limits and data location.

Explore further

Help & technical support

All resources

Find the next step for your issue

Find preparation guidance for onboarding, caching, certificates, security and billing, then choose the appropriate support path.

Bring evidence into technical support

Prepare reproducible delivery and security reports with impact, change history and collaboration details.

Prepare the need, then discuss the solution

Prepare regions, architecture, usage, security objectives and availability for a solution discussion or meeting request.

Report verifiable abuse and content concerns

Learn how to prepare URLs, timestamps and evidence for suspected abuse, rights issues or malicious content.