Loading

Update your naked domain configuration to avoid service disruption

Fecha de publicación: Jun 26, 2026
Descripción

This article explains how to update your naked domain DNS configuration to avoid service disruption when Salesforce migrates your Communities site to the Salesforce Edge Network.

What Is a Naked Domain?

A naked domain (also called an apex domain or root domain) is a domain name without a subdomain prefix — for example, example.com instead of www.example.com. Standard DNS does not allow a naked domain to use a CNAME record, so some customers configure their naked domain using an A record (a direct IP address mapping instead of a hostname mapping).

Why Action Is Required

Salesforce is updating its internal infrastructure to the Salesforce Edge Network for Communities sites that supply their own SSL certificate. Customers who currently use an A record (direct IP address) for their naked domain — instead of ANAME, ALIAS, or CNAME-flattening — must update their DNS configuration before the deadline specified in your outreach case to avoid service disruption.

What Is CNAME-Flattening?

CNAME-flattening (also called ANAME or ALIAS) is a DNS feature supported by many modern DNS vendors that allows a naked (root) domain to point to a hostname (CNAME target) rather than a direct IP address. This is the recommended approach for Salesforce naked domain configurations because it allows Salesforce to update the underlying IP addresses of the Edge Network without requiring you to update your DNS records each time.

Who Is Affected

You are affected if all of the following are true:

  • You have a Salesforce Communities site with a custom domain that uses a naked domain (root domain without a subdomain).
  • Your DNS vendor does not support ANAME, ALIAS, or CNAME-flattening.
  • Your naked domain currently resolves using a direct IP address (A record) rather than a hostname.
Solución

To avoid service disruption during the Salesforce Edge Network migration, choose one of the following three options. Option 1 is strongly recommended. Update your configuration before the deadline specified in your outreach case.

Option 1 (Recommended): Add ANAME, ALIAS, or CNAME-Flattening for Your Domain

Work with your DNS vendor to update your naked domain to use ANAME, ALIAS, or CNAME-flattening instead of a direct IP address (A record). This resolves your domain to a Fully Qualified Domain Name (FQDN) — a complete hostname that identifies your Salesforce org's Edge Network endpoint — rather than a fixed IP address that can change.
To find your CNAME target hostname:

  1. Log in to your Salesforce org.
  2. Click Setup in the upper right corner of the page.
  3. In the left navigation, search for Domain Management or navigate to it directly.
  4. Under Domain Management, go to Domains and click Edit for the domain you want to migrate to the Edge Network.
  5. Locate the CNAME target hostname for your domain. The hostname follows this format: the domain name, followed by a dot, followed by the 18-character Salesforce org ID, followed by .live.salesforce.com. For example, if your domain is example.com and your org ID is 00D000000000001AAA, your CNAME target is example.com.00D000000000001AAA.live.salesforce.com.
  6. Provide this hostname to your DNS vendor and ask them to configure your naked domain using ANAME, ALIAS, or CNAME-flattening to point to it.

Option 2: Switch to a DNS Vendor That Supports ANAME, ALIAS, or CNAME-Flattening

If your current DNS vendor only supports A records for naked domains and cannot configure ANAME, ALIAS, or CNAME-flattening, consider migrating to a DNS vendor that supports these record types. Once you have switched DNS vendors, follow the steps in Option 1 to configure the CNAME target.

Option 3 (Not Recommended): Update the IP Addresses in Your Domain A Record

If you are unable to implement Option 1 or Option 2 before the deadline, you can temporarily update the IP addresses in your A record to the new Salesforce Edge Network IP addresses. Contact Salesforce Support to obtain the new IP addresses.


Steps to update and validate:

  1. Contact Salesforce Support to request the new Edge Network IP addresses for your region.
  2. Log in to your DNS vendor's control panel and update your naked domain A record to remove the existing IP addresses and add the new ones provided by Support.
  3. After updating, validate your configuration by opening a browser and navigating to your domain followed by /smth.jsp (for example, `<REDACTED>).
  4. Open your browser's developer tools and inspect the HTTP response headers. If the header named X-Salesforce-VIP has the value EDGE, your domain is successfully routing through the Salesforce Edge Network.

Why Option 3 is not recommended:

  • The IP addresses assigned to the Salesforce Edge Network can change as frequently as every 6 months. Each time the IP addresses change, you must manually update your A record to avoid another service disruption.
  • Using an A record bypasses the full Salesforce Edge Network routing capability, which means your custom domain will have subpar performance compared to customers using CNAME-flattening.
Número del artículo de conocimiento

000389365

 
Cargando
Salesforce Help | Article