Guide

Networking

Domains

A domain routes a public hostname to one port of a service. Mesh terminates HTTPS at its edge and forwards requests to the service's ready replicas.

Generated domains

Open a service, go to Networking, and choose Generate domain. Mesh assigns a hostname such as teal-k4d2x7pumq7rb3ta.apps.example.com under the platform's domain. HTTPS works at once through the platform's wildcard certificate.

Pick the port your app listens on. Mesh suggests the ports it knows from the service's settings and its image.

Custom domains

  1. In Networking, choose Custom domain and enter the hostname, such as app.example.com, and the port.

  2. At your DNS provider, create a CNAME record from that hostname to the service's generated hostname. The console shows the exact target.

    Text
    app.example.com.  CNAME  teal-k4d2x7pumq7rb3ta.apps.example.com.

  3. Mesh checks the record, then requests a Let's Encrypt certificate. The domain goes from Waiting for CNAME to Issuing certificate to Live. Plain HTTP then redirects to HTTPS.

The CNAME proves you control the hostname, so it must point at this service's own generated hostname. An address record that happens to reach the platform proves nothing and is not accepted.

On the trial plan, custom domains need a saved payment method. Generated domains do not.

Domain states

StateMeaning
Waiting for CNAMEThe record is missing or points elsewhere. The console shows what Mesh found.
Issuing certificateOwnership is proven; the certificate is on its way.
LiveHTTPS is served, and HTTP redirects to HTTPS.
Certificate failedIssuance failed. Mesh retries on its own and shows when.

Mesh renews certificates before they expire. Through the API, a domain binding reports ownership_state and certificate.state separately.

Change and delete

Change a domain's port from its menu. The API can also move a domain to another service with PATCH /v1/domains/{hostname}. Deleting a domain stops routing at once; restore it from Recently deleted during the grace period. See Deleting and restoring.

Serverless services

A request to a sleeping serverless service wakes it. The request is held until a replica is ready.