DNS / SSL issue
Hello
I have a DNS related problem when using my 'custom domain'.
My app is deployed on Railway, and works on a Railway-generated domain.
My domain is on Hostinger, and yesterday I could use the Railway-generated '@' CNAME (Hostinger treats it as ALIAS) and my app would show on the domain root.
However, after resetting the DNS on hostinger yesterday to start fresh, today I can't see anything on the domain root (mydomain.tld), even after configuration with the railway details.
Railway shows 'setup complete' and a green check, but I notice it takes only a few seconds (as opposed to a longer time yesterday).
Also, setting a 'catch all' like *.mydomain.tld I can access any "subdomain" without any problems, with a secure connection over https.
Only the domain root remains unaccessible, and I wonder if it is an SSL problem related to a Railway certificate?
The browser shows this error on the root:
ERR_SSL_PROTOCOL_ERROR
The website cannot provide a secure connection
What can I do to troubleshoot this issue?
Many thanks in advance for your help
Solution:Jump to solution
ALIAS types do not work, it needs to be a CNAME or a flattened CNAME, you would need to use cloudflare's nameservers so that you can do CNAME flattening
13 Replies
Project ID:
9be90934-90aa-4c42-a791-ea01217e9987
SSLchecher finds no certificate for the domain, but I understood Railway would provide one?
Solution
ALIAS types do not work, it needs to be a CNAME or a flattened CNAME, you would need to use cloudflare's nameservers so that you can do CNAME flattening
It did work yesterday though..?
yeah it works until your service IP changes, railway services are using dynamic shared IPs that could change from deployment to deployment
and using cloudflare DNS it would work for the domain root as well, although the IP is dynamic ?
would there be other ways without using cloudflare ?
cloudflare does support CNAMES at the root, yes.
namecheap also supports it, along with a few other DNS providers like DNSimple
will have a look... thank you for now Brody
another question: as I can get www working with railway, would there be a way to 'redirect' the root to www, or it is not possible ?
if your DNS provider can do that, sure, but it's unlikely that they could perform a secure redirect
honestly just switch your nameservers to cloudflare (do no transfer the domain) it's super easy
ok thanks
@Brody Does ALIAS still not work? The documentation says it does.
https://docs.railway.app/guides/public-networking
depends on how the provider handles alias records