--- schema_version: "1" id: db060c8da9e820bd3ecc27dcaab60767b43911677f3b07e61c72d1d2c200a4eb title: DNS Mapping for eCDN Zones in B2C Commerce collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_dns_mapping_for_ecdn_zones.md canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_dns_mapping_for_ecdn_zones.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 08e877dab3827ca0d57d7ca59cd2ec7a2137099c9cc56c33a85b8be176d44183 description: To route a hostname's traffic through its embedded CDN (eCDN) zone, map DNS from your provider to the zone and validate the zone's SSL certificate. Understand the mapping rules, validation methods, and certificate limits before you add or update a certificate. products: - Commerce - B2C Commerce release: "264" --- # DNS Mapping for eCDN Zones in B2C Commerce To route a hostname's traffic through its embedded CDN (eCDN) zone, map DNS from your provider to the zone and validate the zone's SSL certificate. Understand the mapping rules, validation methods, and certificate limits before you add or update a certificate. [Which Salesforce Commerce Product Do I Have?](https://help.salesforce.com/s/articleView?id=commerce.comm_what_product.htm&language=en_US) To upload custom certificates and cut over DNS with the CDN Zones API, see [eCDN Custom Certificates](https://developer.salesforce.com/docs/commerce/commerce-api/guide/cdn-zones-custom-certs.html) and [CDN Zones](https://developer.salesforce.com/docs/commerce/commerce-api/guide/cdn-zones.html#validate-the-hostname-and-cut-over-dns) in the developer documentation. ## Mapping Rules When you map endpoints for eCDN zones in B2C Commerce, keep the following in mind: - The DNS Request for Comments (RFC) doesn't support pointing root domains directly to B2C Commerce. When directing root domains to the eCDN CNAME alias, you must use an external service to redirect from the root domain to the subdomain. - Set up redirects for both HTTP and HTTPS. - To permanently serve traffic from the root domain (`yourcompany.com`) instead of a subdomain (`www.yourcompany.com`), use a DNS-level solution to direct root domains to the eCDN CNAME alias. - Legacy zones and proxy zones require a valid SSL certificate. For the step-by-step DNS procedure, see [Map DNS to an eCDN Zone](https://help.salesforce.com/s/articleView?id=cc.b2c_map_dns_to_ecdn_zone.htm&release=264.0.0&type=5 "After a hostname is active, map DNS at your provider so that the hostname's traffic routes to its embedded CDN (eCDN) zone. Use this procedure whenever you add or update a certificate for a zone."). ## Certificate Validation Methods When you add or update an eCDN managed certificate for B2C Commerce, choose a Domain Control Validation (DCV) method: - **HTTP validation** — use this option without a stacked CDN. If you stack a third-party CDN in front of the eCDN, allow the DCV HTTP path for ACME-compliant Certificate Authorities so validation and renewal keep working: `http:///.well-known/acme-challenge/`. - **TXT validation** — use this option with a stacked CDN. DCV delegation is required with a stacked CDN. To set up DCV delegation, add the DCV delegation CNAME record (which contains the unique identifier, UUID) to your DNS. This CNAME is available in the Certificates table in Business Manager and through the API. Without DCV delegation, revalidate the TXT record every three months because of automatic certificate rotation, and continue to allow the DCV HTTP path because HTTP validation attempts still occur during renewal. Self-managed certificates are validated by uploading your own certificate and private key. ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/images/icon_note.png) Note View certificate details on the Crypto tab in Business Manager from **Administration** | **Sites** | **Embedded CDN Settings** | **Configure Zone**. The expanded view shows certificate type, hosts, issuer, validation method, expiration details, and any TXT or CNAME records or verification actions required for unverified certificates. ## Certificate Limits for B2C Commerce | Certificate type | Limit | Scope | | --- | --- | --- | | Legacy certificates | 4 | Per realm | | Self-managed certificates | 5 | Per realm | | eCDN managed certificates | 500 | Per zone | ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/images/icon_note.png) Note eCDN managed certificates (up to 500 per zone) are included at no additional cost. Additional certificates beyond the legacy and self-managed limits have a monthly subscription cost, which Salesforce discusses with you at your next contract renewal.