---
schema_version: "1"
id: 8ae14f1d64fefc9d374c83d189ed30e3d936545141d384e5bb87c4ec19e6fea4
title: Prerequisites for the Salesforce CDN
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/community_builder_cdn_prerequisites.md
canonical_url: https://help.salesforce.com/s/articleView?id=platform.community_builder_cdn_prerequisites.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: f31f138f186cdb2a7f871a209457e3586d23b4e718d76175e38881cb8f426982
description: Before you set up a custom domain that uses the Salesforce content delivery network (CDN), complete these steps.
products:
  - Salesforce Platform
  - Security
release: "264"
---
# Prerequisites for the Salesforce CDN

Before you set up a custom domain that uses the Salesforce content delivery network (CDN), complete these steps.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions.</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Applies to: <a href="https://help.salesforce.com/s/articleView?id=experience.exp_cloud_basics_glossary.htm&amp;language=en_US" target="_blank">LWR, Aura, and Visualforce sites</a></td></tr></tbody></table>

![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/images/icon_tip.png)

Tip To learn what content delivery networks are, how they work, and how they can help you improve your Experience Cloud site’s performance and scalability, watch [![Video icon](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/extend_click/images/video_60.png) Improve Performance and Scalability with Salesforce’s Content Delivery Network](https://youtu.be/aZCn5dFvyiU).

Unfamiliar with terms like DNS, CAA, and CNAME? See [Custom Domain Terminology](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_terms.htm&release=264.0.0&type=5 "Review the terms related to setting up a custom domain in Salesforce.").

Be sure to read the [Considerations for Using a CDN for Your Experience Cloud Site](https://help.salesforce.com/s/articleView?id=platform.community_builder_cdn_considerations.htm&release=264.0.0&type=5 "If you host public-facing, cacheable content on your Experience Cloud sites, we recommend that you use the Salesforce content delivery network (CDN) to greatly improve load times.").

## Verify the Canonical Name (CNAME) Records for Your Domain

Before you can set up your custom domain with the Salesforce CDN, update DNS to include the required canonical name (CNAME) records for your domain and the \_acme-challenge subdomain. See [Point Your Custom Domain to Your Org](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_update_dns.htm&release=264.0.0&type=5 "Before you add a domain in Salesforce, point your domain to your Salesforce org in Domain Name Service (DNS). If your custom domain uses your HTTPS Certificate or the Salesforce content delivery network (CDN) partner, add a canonical domain name (CNAME) record for your fully qualified domain (FQDN) to DNS. The CNAME record references your Salesforce org ID and your FQDN. Then, if you plan to use the Salesforce CDN to serve your Experience Cloud site on your custom domain, add a second CNAME record that our CDN partner requires.").

## Manage Certificate Authority Authorization (CAA) Records

The Salesforce CDN uses Let’s Encrypt as its certificate authority. Before you set up our CDN for your domain:

- If your domain doesn’t have a current Certification Authority Authorization (CAA) record, leave it as is.
- If your domain or the subdomain has a CAA record, add letsencrypt.org to the record.
- If your company decides to set up a CAA record in the future, add letsencrypt.org to the record to avoid disruption to your CDN.

For more information, see the [Let’s Encrypt](https://letsencrypt.org/docs/caa/) website.

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-platform-extend_click-264-0-0-production-enus/5f7d9219-b7b1-4552-8891-f1aba9b289fc/images/icon_note.png)

Note Let’s Encrypt requires consent from the owner of high-value domains before allowing a CAA certificate change for those domains. The list of high-value domains isn’t publicly available. If your domain is on the list of high-value domains, contact Let’s Encrypt to temporarily remove the block before configuring the Salesforce CDN. If your CDN request fails or it remains in a status of provisioning for more than a day, contact Salesforce Customer Support for assistance.

## Use an Existing External Domain

Salesforce uses a partner service to optimize content delivery. All information that’s sent to or returned by a domain is stored and transmitted through the CDN service.

If you have an existing domain hosted outside of Salesforce, such as www.example.com, and that domain isn’t currently registered with the Salesforce CDN partner that will serve your domain, moving to the Salesforce CDN is a two-step process. First, set up a custom domain that points to our CDN partner as a third-party CDN. Commerce LWR sites can’t use a CDN outside of Salesforce. See [Use a Third-Party Service or CDN to Serve Your Custom Domain](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_external_host.htm&release=264.0.0&type=5 "Use a domain that’s hosted by a third-party service to serve your Experience Cloud sites or Salesforce Sites. These third-party services include third-party hosts, web application firewalls (WAFs), and non-Salesforce content delivery networks (CDNs).").

Then, after you activate the custom domain and your domain successfully serves content from your Experience Cloud site, [change the HTTPS option](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_change_service.htm&release=264.0.0&type=5 "Change the method for serving your domain. For example, switch from a third-party service or content delivery network (CDN) to the Salesforce CDN. Update your domain in Salesforce to use a different third-party service or CDN to serve your site. Or update a temporary non-HTTPS domain to use HTTPS as required by Salesforce.") for that custom domain to the Salesforce CDN.

#### See Also

- [Custom Domains](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt.htm&release=264.0.0&type=5 "Provide a branded experience for users who access your external-facing Salesforce content by serving your Digital Experiences or Salesforce Sites on a domain that you own, such as https://www.example.com.")
- [Serve Your Experience Cloud Site with the Salesforce Content Delivery Network (CDN)](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_salesforce_cdn.htm&release=264.0.0&type=5 "Optimize page load times and site performance with our content delivery network. Salesforce partners with a content delivery network (CDN) provider to efficiently deliver publicly cacheable content to users on your Experience Cloud sites. We recommend the Salesforce CDN for custom domains that serve Digital Experiences, including Experiences built with Experience Cloud, Commerce, and Industries licenses.")
- [View and Edit Single Sign-On Settings](https://help.salesforce.com/s/articleView?id=xcloud.sso_saml_detail.htm&type=5&language=en_US)