This document describes how to add domain names for resolution in the HTTPDNS console and how to manage those domain names.
Add a domain name
Log on to the or the EMAS console.
In the left navigation pane, choose Resolution Management > Add Domain Name.
Click Add Domain Name. Enter a valid domain name or wildcard domain name, and then click OK.
Examples:
Single domain name: such as www.aliyun.com and a.aliyun.com
Wildcard domain name: such as *.aliyun.com, which matches subdomains such as a.aliyun.com, b.aliyun.com, and a.b.aliyun.com
Wildcard domain names for top-level domains are not supported, such as *.com, *.cn, and *.net
Domain name additions and deletions take effect in approximately one minute.
Each account can have up to 200 domain name rules.
Any domain name resolution and blacklist for DoH
The DNS over HTTPS (DoH) standard does not include an authentication mechanism. Because DoH often applies system-wide, it is impractical to list every domain name. A whitelist alone cannot meet all security and availability requirements. To prevent threats such as unauthorized usage and support more resolution scenarios, HTTPDNS provides a Resolve all domain names option. You can also use the blacklist feature for fine-grained control.
When you use DoH for resolution, matching order and scope follow these rules:
Requests are first matched against the domain name list (whitelist), and then against the blacklist.
If Resolve all domain names is set to No, only domain names in the domain name list are resolved.
If Resolve all domain names is set to Yes, the domain name list is ignored and all domain names are resolved.
The blacklist has higher priority than the domain name list. If a domain name appears in both the domain name list and the blacklist, the blacklist rule applies and resolution is denied.
Some network libraries or frameworks probe DoH availability using specific domain names. If you allow resolution for only certain domain names, you must add these probe domain names to the resolution whitelist. Otherwise, DoH may not work correctly.
Qt WebEngine and Electron use www.gstatic.com
The CEF framework and Chrome browser use google.com
Delete a domain name
In the domain name list, click Delete to the right of a domain name. Confirm the deletion to remove the domain name rule.
After a domain name rule is deleted, HTTPDNS no longer resolves domain names that match that rule.
After a domain name is deleted, you can recover it only by adding it again.
View domain name data
In the domain name list, click View to the right of a domain name to see its resolution data.
Domain name resolution data is available on a T+1 basis.
