Subdomain Configuration
Configure protection for www, blog, shop, and other subdomains.
Understanding Subdomains
What Are Subdomains?
- Root domain:
example.com - WWW subdomain:
www.example.com - Other subdomains:
blog.example.com,shop.example.com,api.example.com
Protection Options
- Protect all subdomains - Route everything through AtomicEdge
- Protect specific subdomains - Choose which ones to protect
- Leave some unprotected - Direct routing for development, etc.
Method 1: Individual Subdomain Records
Protect Specific Subdomains
Add separate DNS records for each subdomain you want to protect:
@ → 198.51.100.10 (AtomicEdge - root domain)
www → 198.51.100.10 (AtomicEdge - www subdomain)
blog → 198.51.100.10 (AtomicEdge - blog subdomain)
shop → 198.51.100.10 (AtomicEdge - shop subdomain)
Leave Some Unprotected
@ → 198.51.100.10 (AtomicEdge - protected)
www → 198.51.100.10 (AtomicEdge - protected)
blog → 203.0.113.50 (Direct to blog server - not protected)
dev → 192.168.1.100 (Direct to dev server - not protected)
Method 2: Wildcard Records
Protect All Subdomains
Use a wildcard record to automatically protect any subdomain:
Record Type: A
Name: *
Value: 198.51.100.10
TTL: 300
When to Use Wildcards
- Many subdomains - You have lots of subdomains
- Dynamic subdomains - Subdomains are created automatically
- Simple setup - You want everything protected by default
When NOT to Use Wildcards
- Mixed protection - Some subdomains should not be protected
- Different servers - Subdomains point to different servers
- Email subdomains - Mail servers should not be proxied
Common Subdomain Scenarios
Standard Business Website
@ → 198.51.100.10 (AtomicEdge)
www → 198.51.100.10 (AtomicEdge)
E-commerce with Blog
@ → 198.51.100.10 (AtomicEdge - main site)
www → 198.51.100.10 (AtomicEdge - main site)
shop → 198.51.100.10 (AtomicEdge - e-commerce)
blog → 198.51.100.10 (AtomicEdge - blog)
Multi-Environment Setup
# Production (protected)
@ → 198.51.100.10 (AtomicEdge)
www → 198.51.100.10 (AtomicEdge)
# Development (not protected)
dev → 192.168.1.100 (Direct to dev server)
staging → 192.168.1.101 (Direct to staging server)
test → 192.168.1.102 (Direct to test server)
SaaS Application
# Main marketing site
@ → 198.51.100.10 (AtomicEdge)
www → 198.51.100.10 (AtomicEdge)
# Application subdomains
app → 198.51.100.20 (Different AtomicEdge endpoint)
api → 198.51.100.20 (Same as app)
admin → 198.51.100.20 (Same as app)
# Support and docs
help → 198.51.100.10 (Same as main site)
docs → 198.51.100.10 (Same as main site)
AtomicEdge Site Configuration
Adding Subdomains to AtomicEdge
For each subdomain you want to protect:
- Go to your AtomicEdge dashboard
- Click "Add New Site"
- Enter the full subdomain (e.g.,
blog.example.com) - Configure the backend IP for that subdomain
- Get the WAF endpoint IP for DNS configuration
Multiple Sites vs Single Site
- Separate sites - Different backend servers, different settings
- Single site - Same backend server, same protection settings
Email and Special Subdomains
Don't Protect These
- Mail servers:
mail.example.com,smtp.example.com - FTP servers:
ftp.example.com - Direct access:
cpanel.example.com,webmail.example.com
Keep These Direct
mail → 203.0.113.100 (Direct to mail server)
ftp → 203.0.113.101 (Direct to FTP server)
cpanel → 203.0.113.102 (Direct to hosting panel)
Testing Subdomain Configuration
Verify Each Subdomain
- Visit each subdomain in your browser
- Check that they load correctly
- Verify in AtomicEdge dashboard that traffic is flowing
- Test functionality (login, checkout, etc.)
DNS Verification Tools
- whatsmydns.net - Check global DNS propagation
- dnschecker.org - Verify DNS records worldwide
- nslookup - Command line DNS checking
Need Help?
- 💬 Live Chat: Get help with subdomain configuration
- 📧 Email Support: Send us your subdomain list for review
- 🛠️ Managed Setup: We can configure all subdomains for you (Enterprise)