All Products
Search
Document Center

Edge Security Acceleration:DNS rules

Last Updated:Dec 19, 2025

If you specify a Uniform Resource Identifier (URI) but the requested resources are stored on different origin servers, you can create a domain name system (DNS) rule to replace the DNS record resolved from the hostname in the request. This ensures that the request is routed to the correct server to obtain the desired resources.

Availability

DNS rules are supported only by Premium and Enterprise plans.

How DNS rules work

After you configure DNS records for your domain name in Edge Security Acceleration (ESA), clients establish connections with your origin server based on DNS resolution results such as IP addresses and domain names.

If you want to route client requests based on specific characteristics such as request paths and geographical locations to different origin servers, you can create DNS rules. When client requests match the configured rules, ESA returns the resolved addresses including A records, canonical name (CNAME) records, and AAAA records that overwrite the original DNS records and forwards the client requests to the desired servers.

image

Create DNS rules

  1. In the ESA console, choose Websites. In the Website column, click the target website.

  2. In the left navigation pane, choose Rules > Origin Rules.

  3. Click Create Rule and enter a Rule Name.

  4. In the If requests match... section, set the request features to match. For more information about how to configure rules, see Rule expression components.

  5. Enter or select a DNS record based on your business requirements.

    image

  6. Click OK.

References

Rule-related features vary in execution priorityrule behavior, and configuration scope. For more information, see How ESA rules take effect.