# Domains

import Apiv4Rollout from '~/includes/snippets/apiv4Rollout/en/snippet.mdx'

<Apiv4Rollout />

:::caution[important]
The Domains feature has been replaced by **Workloads.**
For more information about the new product, visit the [Workloads Reference](/en/documentation/products/secure/workloads/).
:::


**Domains** is an [Azion Console](https://console.azion.com) tool that provides a domain generation and management service.

When you [build an application](/en/documentation/products/guides/build/build-an-application/), your application is given an automatically generated **Azion domain**, in the format `xxxx.map.azionedge.net`. You can create multiple domains for your applications.

If you already own a domain, you can [redirect your traffic to Azion](/en/documentation/products/guides/point-domain-to-azion/) by configuring the records in your DNS provider and listing your **custom domains**.

You may also bind a **Digital Certificate** to domains that use the HTTPS protocol.

## Implementation

| Scope | Resource |
| --- | --- |
| Adding a custom domain | [Getting started](/en/documentation/products/guides/configure-a-domain/) |
| About Certificate Manager | [Certificate Manager](/en/documentation/products/secure/firewall/certificate-manager/) |
| About mTLS | [mTLS](/en/documentation/products/secure/firewall/mtls/) |

---

## Environment

Before going operational, you can activate a testing configuration to preview setups. When creating a new Domain, you can choose the environment type:

- **Global Infrastructure*: production environment of the application. The Azion domain will be in the format `xxxx.map.azionedge.net`.
- **Staging Network**: environment for testing the application. This configuration won't impact the **Production** environment. The Azion domain will be in the format `xxxx.preview.azionedge.net`.

To enable environment selection, contact the [Sales Team](https://www.azion.com/en/contact/).

---

## CNAME

CNAME is the standard service responsible for creating CNAME settings, enabling you to customize the application's domain.

You may restrict access to your application from the Azion domain by enabling the **CNAME Access Only** switch.

The **default limit** is *50* CNAMEs per domain. However, you can increase the limits based on your plan, contacting the [technical support team](/en/documentation/services/support/). To know more about Domains limits, check the [section](#limits) below.

---

## Digital Certificate

To use your domain in HTTPS, you'll need a TLS certificate (X.509). Without additional costs, you may include your TLS certificates in [Azion Console](https://console.azion.com) or generate a *Let's Encrypt*™ certificate, which will be automatically managed by Azion.

---

## Support for Mutual Transport Layer Security (mTLS)

Azion's Domains also have **Support for Mutual Transport Layer Security (mTLS)**, an authentication method for users and visitors that validates the digital certificate on both sides of a request, client, and edge (server). Adding support for mTLS to your **Applications** ensures a more secure *TLS/TLS handshake* and is an *Open Banking* requirement.

:::tip
You may need mTLS if your application deals with financial services and payments.
:::

To enable this feature, contact our [Sales Team](https://www.azion.com/en/contact/).

---

## Local staging of custom domain

The local `etc/hosts` file maps IP addresses to domains. When you [associate the edge node IP with the CNAME](/en/documentation/products/guides/stage-applications-through-hosts-file/) assigned to your domain in your `hosts` file, you force your computer's DNS resolution to access this domain through the edge node and not through public DNS servers. This way, you can stage your application locally as if it were already deployed on your custom domain on the edge before you [point your domain](/en/documentation/products/guides/point-domain-to-azion/) to Azion.

---

## Limits

:::tip
**Increase limits** <br></br>
You can request to increase the limits based on your plan. Contact the [technical support team](/en/documentation/services/support/) to request it.
:::

These are the **default limits**:

| Scope | Limit |
| --- | --- |
| CNAMEs per domain | 50 |

These are the **default limits** for each Support service:

| Scope | Developer | Business | Enterprise | Mission-Critical |
| --- | --- | --- | --- | ---|
| Domains per account | 100 | 100 | 100 | 1,000 |

:::tip
**Increase limits** <br></br>
You can request to increase the limits based on your plan. Contact the [technical support team](/en/documentation/services/support/) to request it.
:::