DNS Mapping for eCDN Zones in B2C Commerce

Mapping Rules

When you map endpoints for eCDN zones in B2C Commerce, keep the following in mind:

• The DNS Request for Comments (RFC) doesn't support pointing root domains directly to B2C Commerce. When directing root domains to the eCDN CNAME alias, you must use an external service to redirect from the root domain to the subdomain.
• Set up redirects for both HTTP and HTTPS.
• To permanently serve traffic from the root domain (yourcompany.com) instead of a subdomain (www.yourcompany.com), use a DNS-level solution to direct root domains to the eCDN CNAME alias.
• Legacy zones and proxy zones require a valid SSL certificate.

For the step-by-step DNS procedure, see Map DNS to an eCDN Zone.

Certificate Validation Methods

When you add or update an eCDN managed certificate for B2C Commerce, choose a Domain Control Validation (DCV) method:

• HTTP validation — use this option without a stacked CDN. If you stack a third-party CDN in front of the eCDN, allow the DCV HTTP path for ACME-compliant Certificate Authorities so validation and renewal keep working: http://<YOUR_DOMAIN>/.well-known/acme-challenge/<TOKEN>.
• TXT validation — use this option with a stacked CDN. DCV delegation is required with a stacked CDN. To set up DCV delegation, add the DCV delegation CNAME record (which contains the unique identifier, UUID) to your DNS. This CNAME is available in the Certificates table in Business Manager and through the API. Without DCV delegation, revalidate the TXT record every three months because of automatic certificate rotation, and continue to allow the DCV HTTP path because HTTP validation attempts still occur during renewal.

Self-managed certificates are validated by uploading your own certificate and private key.

Note View certificate details on the Crypto tab in Business Manager from Administration | Sites | Embedded CDN Settings | Configure Zone. The expanded view shows certificate type, hosts, issuer, validation method, expiration details, and any TXT or CNAME records or verification actions required for unverified certificates.

Certificate Limits for B2C Commerce

Note eCDN managed certificates (up to 500 per zone) are included at no additional cost. Additional certificates beyond the legacy and self-managed limits have a monthly subscription cost, which Salesforce discusses with you at your next contract renewal.