DNS resolve depending on service.
I need to resolve a domain to a particular address depending on service; essentially:
HTTPS (Browser) -> CloudFlare
Elsewise -> Origin server
As far as I can tell there are no RRs that could coerce this behaviour; I considered SRV's but browsers don't consider them, and URI records are seemingly obsolete.
One option would be to map both the origin and CF. The main problem here is that, the particular non-HTTPS client software just relies on whatever address is returned by
The last resort would be doing HTTP redirection at the origin, redirecting to HTTPS/CF.
HTTPS (Browser) -> CloudFlare
Elsewise -> Origin server
As far as I can tell there are no RRs that could coerce this behaviour; I considered SRV's but browsers don't consider them, and URI records are seemingly obsolete.
One option would be to map both the origin and CF. The main problem here is that, the particular non-HTTPS client software just relies on whatever address is returned by
gethostaddr() and assumes there's only one (unlike browsers, which will attempt others). Relying on the undefined ordering of A records (and everything above to get to gethostaddr()) would be very hacky.The last resort would be doing HTTP redirection at the origin, redirecting to HTTPS/CF.
