Host DNS resolution for ESA accelerated domain names - Edge Security Acceleration

Edge Security Acceleration (ESA) provides a flexible Domain Name System (DNS) feature. ESA supports NS setup and CNAME setup. After you connect your site to ESA, ESA provides services such as dynamic and static content acceleration, security protection, and edge computing to improve your site's access experience and security.

Note

If your site receives DNS query attacks that exceed the ESA platform's protection limit, DNS resolution for your site's records may be blackholed or halted.

DNS setup types

CNAME: Recommended for large enterprises that use multiple proxy acceleration services. If different subdomains of your site, such as api.example.com and img.example.com, use different cloud services and you want to connect only some subdomains to Alibaba Cloud ESA, choose the CNAME connection type. This method lets you retain your current DNS service provider. ESA generates a CNAME record for your site. Add this CNAME record at your DNS service provider.
NS: Recommended for individual developers and small to medium-sized enterprises. Choose the NS connection type if you want to manage and accelerate all DNS records for your site, such as example.com, from a single location within ESA. Change your domain's name server (NS) addresses to the ones assigned by ESA. ESA then handles your DNS configuration. You must then manage your DNS records in the ESA console.

Features

The DNS management feature lets you perform the following operations on your site.

Feature	Description
DNS analytics	DNS analytics provides key metric monitoring and traffic statistics reports in the form of visualized analytics with different dimensions. You can adjust service policies based on the real-time monitoring for your website.
Manage DNS records	After you add a website to Edge Security Acceleration (ESA), you can add, edit, and delete DNS records. This topic describes when and how to perform these operations.
CNAME flattening	Due to limitations in the DNS protocol, CNAME records cannot coexist with other record types, such as MX or TXT records, for the same domain name. CNAME flattening resolves this conflict by returning the IP address of the target domain instead of its CNAME record. This feature reduces the number of recursive queries from local DNS servers, which accelerates domain name resolution for clients.
Convert DNS setup	Edge Security Acceleration (ESA) offers two types of DNS setups: CNAME and NS. This topic guide you through the steps to convert from NS setup to CNAME or vice versa.
SaaS Manager	Lets you add your customers' custom domains, such as `app.customer.com`, to your existing ESA website. This seamlessly extends your site's security and acceleration capabilities to your end customers, enhancing their brand trust while simplifying Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate management and security policy configuration for customer domains.

Support for different plans

Type	Details	Entrance (0 USD/month)	Pro (15 USD/month)	Premium (249 USD/month)	Enterprise (Customize)
DNS management	Record number for a website	100	200	500	500
	DNS record types	Supported	Supported	Supported	Supported
	SaaS Manager	5	20	100	Customize by contacting the sales team
	DNS analytics	Supported	Supported	Supported	Supported