Domains
What Is Domains?
The Domains tab is the screen on which the domain names (zones) for which the selected DNS service serves as authoritative are managed. A single DNS service can host more than one domain name that are configured independently of each other at the same time.
Every domain name carries its own DNS records, operating mode, record management form and security/transfer settings (DNSSEC, SOA, slave servers) independently. Thanks to this independence, on the same service one domain name can work in the Standalone mode, another in the Datacenter mode and another in the Disaster Recovery mode; that is, a single service presents more than one zone that have different topologies from a single point.
Operating Modes
Every domain name is configured with an operating mode (Default Mode) that determines how its records will be resolved. The mode assigned to the domain name is applied to all the DNS records of that domain name every time the domain name is saved. The records are kept in data center groups in every mode; the mode determines which group and which records will be selected while the answer is given.
| Mode | Data Center Groups | Behavior |
|---|---|---|
| Standalone | Single (local) | A single data center group; a flexible configuration from a simple authoritative DNS to a conditional resolution bound to a health scenario and to load handover with fail-safe records. |
| Disaster Recovery | Two (Main DC + DR DC) | Automatic active-passive switching between the main and the backup data center. |
| Datacenter | One or more (DC № 1, DC № 2 …) | Routing based on sorting between more than one data center. |
Standalone
The domain name works with a single data center group (the local data center); separate main/backup data center groups are not defined. The answers are produced from the records in this group.
Standalone is not only for a simple DNS publication. The condition for every record to be included in the answer can be bound to a health scenario: if the scenario is active, the record takes part in the answer, and if it is not, it is excluded. In this way, with the fail-safe (backup) records that come into play when the health check of the primary records fails, a failover behavior can be established within a single data center as well.
Disaster Recovery
Exactly two data center groups are defined for the domain name: Main DC (the main one) and DR DC (the backup one); the local data center has to be one of these two groups. In the normal situation the answers return from the records of the Main DC (active-passive working).
The condition for switching to the backup data center is determined separately in every record:
- The default condition is Automatic (when no healthy primary records left): when no healthy record remains in the Main DC, it is switched to the backup.
- If a health scenario is selected in the record, it is switched to the backup when the scenario becomes active. In this situation, while the Disaster Recovery on no healthy records option is on (the default), no healthy record remaining in the Main DC also triggers the switching.
The condition is recalculated at every evaluation; when the triggering situation disappears, the answers return to the Main DC by themselves.
Datacenter
The domain name opens with the local data center (DC № 1) and as many additional data centers as are needed are added. While the answer is given, the data centers are sorted according to the selected source and the first N data centers (the default is 1) take part in the answer with their records. The default source is All DC records: no sorting is done, the DC № order in the form is used.
For the sorting, the following sources are also selected:
- The data center device: the CPU, memory, bandwidth, status or packet loss metrics of the related data center device.
- vService: the CPU, memory, bandwidth, request, connection, new session, status or healthy Backend Service number of a specified vService.
- The client proximity: the network proximity relative to the client; in this source the first N limit is not applied.
The mode-specific record settings
The settings such as the sorting source in the Datacenter mode, the switching scenario in the Disaster Recovery mode, the balance algorithm and the fail-safe records are configured while the related DNS record is being defined. See Records.
The Record Management Forms
| Form | Description |
|---|---|
| Local | The DNS records are added, edited and deleted manually from the TR7 GTM interface. |
| Express | The DNS records are pulled automatically from an external DNS server with Zone Transfer (AXFR); the record management is done over the source server. Express can be assigned separately to every data center group of the domain name. See Express Profiles. |
Operational Best Practices
- The domain name must be entered carefully. The name is locked in the editing form and cannot be changed afterwards; this screen does not prevent the same name from being added a second time either.
- The mode must be decided before the records are added. The mode of the domain name is applied to all of the records at every save; when the mode is changed afterwards, the data center groups of the records are re-established according to the new mode.
- In Disaster Recovery the role of the local data center must be selected consciously. The local data center has to be the Main DC or the DR DC; which device will answer as the main one and which as the backup one is determined with this selection.
- A different data center must be selected in every data center group. The same data center being assigned to two groups or the selection being left empty does not produce a warning in the form.
- A profile must be selected when Express is marked. A group in which the EXPRESS box is marked and no profile is selected is saved as Local.
- The slave server addresses must be entered correctly. Zone transfer permission is given to these addresses and a NOTIFY is sent at every change.
- After DNSSEC is turned on, the DS record must be published in the parent zone. The record is in the window opened from the DNSSEC lock in the list.
- The records must be reviewed before deleting. When the domain name is deleted, all of its records, including the automatic SOA record, are deleted together with it.
How to Add?
A new domain name is added through the TR7 web management interface with the steps below:
- The Configuration Menu is opened by clicking the TR7 logo at the bottom left.
- The GTM → GTM Services → The service name → Domains → Add steps are followed.
- A unique name is entered for the domain name.
- Default Mode and, according to the mode, the data center groups are selected; if necessary, Slave Server IPs, DNSSEC, Meta Data and SOA Format are set.
- The domain name is added by clicking the
Addbutton.
TIP
Reaching the page via quick search
Instead of navigating the menu step by step, the related page is reached directly by using the search bar in the bottom left corner of the screen. The search bar opens with the Alt + T shortcut on Windows and Opt + T on macOS; typing the name of the feature being searched for is then sufficient.
The records are added to the created domain name from the Records tab of the same screen.
Domains Listing Screen
By following the GTM → GTM Services → The service name → Domains path, the list of all the domain names that belong to the DNS service is reached. Domain name adding, editing and deleting operations are performed through this screen.
Domain Names Listing Screen
The table opens with the following columns by default:
| Column | Description |
|---|---|
| Domain Name | The domain name; it is shown without the dot at the end. |
| Record Management | The record management form in the data center groups of the domain name, in the local: 1 or express: 2 form (the form and the number of groups). |
| DNSSEC | If DNSSEC is on, a green lock, and if it is off, a gray open lock; when it is hovered over, it says Enabled / Disabled. When the open lock is clicked, the DNSSEC info for <domain name> window opens (see DNSSEC). |
The following column is hidden by default and is added from the column selector:
| Column | Description |
|---|---|
| Default Mode | The operating mode of the domain name: Standalone, Disaster Recovery or Datacenter. |
The table is not sorted by default; it is sorted by clicking a column header. The hidden column preference is stored in common with the Records list.
The items in the toolbar are arranged from left to right in the following order; the last two items (Page Information and Page Size) are located in the information strip below the table.
Columns
Which columns are shown in the table is selected; the three columns other than Default Mode are on by default. In the same panel, columns are reordered by dragging and alignment is selected per column; the row height is fitted to the page with the Fit rows to the page button, and the column layout is reset to default with the Reset button. When the width badge next to a manually widened column is clicked, the column returns to the automatic width.
Filter
The Filter button is used to filter the domain names shown in the list. There are two cards in the strip: Default Mode and DNSSEC (Enabled / Disabled). The number in the parentheses next to the card title is the number of values listed in that card; more than one value can be selected together and the selections are displayed as a label in the Title = Value form.
Export
The table is exported as Excel, CSV or PDF by clicking the Export button. In the window that opens, the Filename, Format and Data Source, together with the Columns to be exported, are determined; the remaining fields are displayed according to the format: CSV Separator for CSV, Excel Sheet Name for Excel, and Page Orientation and Page Size for PDF.
Add
By clicking the Add button, the form for creating a new domain name opens in the Add Domain tab.
Edit
By clicking the Edit button, the editing form of the selected domain name opens in the Edit Domain tab. The button becomes enabled only when a single domain name is selected. The editing form is the same as the add form; the Domain Name field is locked, the other fields can be changed and the change is saved without asking for confirmation. After the save, the mode of the domain name is applied to all of its records again.
Delete
When one or more domain names are selected and the Delete button is clicked, the related domain names are deleted. Before deleting, the "Are you sure?" confirmation is asked. The button is passive while there is no selection.
WARNING
All the DNS records of the deleted domain name, including the automatically created SOA record, are deleted together with the domain name and cannot be recovered; a separate log is not written for the records. The operation is written into the user operation record (Domain <name>. is deleted).
Search
Used to search all information in the table.
RegExp Search
Used to search all information in the table with a regular expression (RegExp).
Column Based Search
Used to perform a column-based search on the information in the table; a separate search line opens for every column and next to every box there are the Negate button that reverses the result and its own RegExp key.
Page Information
Contains information about the total number of defined domain names and the number of domain names displayed in the list: Showing N-M of T records and the number of selected domain names (N selected, or Nothing selected when there is no selection).
Page Size
The maximum number of domain names to be displayed on the page is selected. The default is 100; the options are 5, 10, 20, 50, 100, 200, 500 and All.
Right-Click Menu
When a row is right-clicked, a menu with the domain name in its title opens. Both operations in the menu apply only to the right-clicked domain name; a selection made in the list does not affect the menu.
| Operation | What it does |
|---|---|
| Edit | Opens the editing form of the domain name in the Edit Domain tab; it is the same as the form opened by the Edit button in the toolbar. |
| Delete | Deletes the right-clicked domain name; the same confirmation question as the deletion in the toolbar is displayed. |
Preview of the Selected Domain Name
When a row in the list is clicked, the preview of the domain name opens on the right of the screen; when the selected row is clicked again, the panel closes. In the title there are the domain name (with the dot at the end, e.g. tr7.com.) and the DNS Domain subtitle, and at the top right there are three operations.
Preview of the Selected Domain Name
| Operation | What it does |
|---|---|
| Dashboard | Opens the own dashboard of the domain name (see The Domain Name Dashboard). |
| Edit | Opens the editing form of the domain name in the Edit Domain tab. |
| Log | Opens the GTM event records and the user operations that belong to the domain name in a window, without leaving the page. |
The panel has two tabs:
Lists the configuration lines of the domain name (the table below).
Lists the operations performed on the domain name and the GTM events that belong to it as a timeline.
The rows in the Details tab are as follows, in order. In a cluster the table is shown with two columns that carry the name of every device; Current SOA Record is written separately for every device.
| Row | Description | Visibility condition |
|---|---|---|
| DNS Service | The DNS service to which the domain name is bound, with the status circle; the next to it opens the preview of the service and the opens the editing form. | Always |
| Management Type | The old management type of the domain name. | Only on the domain names created in the previous versions |
| Default Mode | The operating mode of the domain name. | Always |
Record Management / Main DC (<dc>) / DR DC (<dc>) / DC № n (<dc>) | One row for every data center group; the value is Local management or EXPRESS. When the EXPRESS value is hovered over, the quick view of the Express profile opens. The row name changes according to the mode: Record Management in Standalone, Main DC / DR DC in Disaster Recovery, DC № n in Datacenter. | Always |
| Slave Server IPs | The addresses to which the zone transfer is permitted. | While they are defined |
| DNSSEC | If it is on, ✔, and if it is off, -. | Always |
| SOA Format | The SOA serial number format. | Always |
| Current SOA Record | The SOA record of the domain name that is valid on the device. | Always |
| Meta Data | The defined pairs, in the key:value form. | While they are defined |
Domain Name Add Form
A new domain name is added to the DNS service by following the GTM → GTM Services → The service name → Domains → Add steps.
Domain Name Add Form
INFO
Domain Name Required
The domain name to be created is entered (e.g. example.com, api.example.com). The dot at the end is added automatically; the names with a wildcard character (*) are not accepted and on an invalid name the Domain "<name>." is not valid warning is given. The domain name is locked in the editing form after it is created.
INFO
Default Mode Default: Standalone
The operating mode of the domain name is selected; the options are, in the screen order, Standalone, Disaster Recovery and Datacenter. According to the selected mode, the data center groups in which the records will be kept are displayed under the field. For the DNS resolution behavior of the modes see Operating Modes.
In every data center group there is an EXPRESS checkbox: when the box is marked and an Express Profiles profile is selected, the records of that group are pulled automatically from the external DNS server with Zone Transfer (AXFR); if it is not marked, the records are managed manually over TR7 GTM (Local). The + icon next to the profile selector opens the form for adding a new Express profile. In this way different data center groups of the same domain name can be Local or Express.
Standalone
A single (local) group is displayed; in the group there is only the EXPRESS checkbox, and there is no data center selection or sorting arrows.
Standalone
Disaster Recovery
Two groups are displayed: Main DC (the main one) and DR DC (the backup one). A data center is selected for every group and EXPRESS is marked separately; at the beginning the local data center is the Main DC. The local data center has to be one of the two groups. With the / icons at the end of the row (One Up / One Down) the places of the groups are changed.
Disaster Recovery
Datacenter
When the mode is selected, only the DC № 1 group that carries the local data center opens. With the icon (Add DC) that is only in the row of DC № 1, a new group is added; with the trash can icon of the other groups (Remove DC) the group is removed, and the trash can in the local group is passive. With the arrow icons the sorting is changed; this order determines the answer priority when no sorting source is selected in the record.
Datacenter
In the data center selector in the Disaster Recovery and Datacenter groups there are the local data center and the defined Remote Devices; the + icon next to the selector opens the form for adding a new remote data center.
INFO
Slave Server IPs Default: Disabled
The IP addresses of the slave DNS servers that are permitted to do a Zone Transfer (AXFR) from the domain name on TR7 GTM are added to the list opened with the Enabled / Disabled switch. Every time there is a change in the domain name, a NOTIFY is sent to these addresses; in this way the records that TR7 GTM presents as authoritative are transferred to the slave servers as well.
INFO
DNSSEC Default: Disabled
The DNS security extensions (DNSSEC) are turned on with the Enabled / Disabled switch. DNSSEC offers protection against DNS spoofing by making the DNS answers be verified with digital signatures. After it is enabled, the DNSSEC info for <domain name> window is opened by clicking the DNSSEC lock in the list: in the window there are the DS records table (Key tag, Algorithm, Digest type, Digest) that must be published in the parent zone and, under it, the DNS KEY line. In a cluster a separate table is shown for every device.
INFO
Meta Data Default: Disabled
The custom key-value pairs for the domain name are entered into the table opened with the Enabled / Disabled switch; the placeholder of the first box is Variable name and that of the second is Value. The pairs are written as the meta data of the domain name as they are.
INFO
SOA Format Default: YYYYMMDD01 format
How the SOA (Start of Authority) serial number of the domain name will advance in the changes made from the management interface is selected. The serial number is used in the zone changes being notified to the slave servers.
| Option | Meaning |
|---|---|
| YYYYMMDD01 Format | A date-based serial number (e.g. 2024090601; the default). |
| Increase by 1 | The serial number is increased by 1 at every change. |
| Current UNIXTIME | The Unix timestamp is used. |
The serial number continues from the value the device is currently serving. If the domain name is a local group fed through zone transfer with Express Profiles, the serial number is served as it comes from the master server and SOA Format is not applied to this domain name.
A SOA record is created automatically for every domain name (ns1.@ hostmaster.@ 10800 3600 1209600 3600, TTL 3600); the fields of the record are edited from the Records tab.
The Domain Name Dashboard
Every domain name has its own dashboard that shows the query metrics that belong only to that domain name. The dashboard is opened with the Dashboard button in the domain name preview or by clicking the domain name row in the GTM Domains tab added to the Left Monitor Panel; clicking the row in the list opens not the dashboard but the preview.
On the dashboard screen there are the own tab of the domain name and the Records tab; in the ⋮ menu at the right of the tab bar there is the Edit Domain operation. On the preview panel at the right of the dashboard tab there are the Edit and Log buttons. In a small line above the panel titles the domain name is written.
The time interval, the refresh, the settings, the template menu, the panel view icons and the summary columns are the same as the service dashboard; for their detail see Dashboard › Screen Controls. All the panels on this dashboard show a query metric; the summary columns are Last q/s, Avg. q/s, Max. q/s and Total queries. The dashboard layout is stored separately from the service dashboard and in common on all the domain name dashboards.
On the dashboard there are four view tabs and all four are always visible:
| Tab | Content |
|---|---|
| Summary | Seven panels that summarize the general status of the domain name. |
| Traffic | The number of queries and the existing / non-existing name breakdown. |
| Query Types | The record type distribution and a separate panel for each of the 17 record types. |
| Records | The query breakdown on a record basis; with the table and line views. |
Summary Tab
The panels take place on the screen in this order: Queries by Country, Queries (digital value), Existent/Nonexistent (pie), Query Type Distribution, Queries (line), Existent/Nonexistent (line) and Queries Per Record.
Queries by Country
It shows the distribution of the queries coming to the domain name on the world map according to the client country. The queries coming from the local networks are collected in the Local networks series and this series is always shown. The map, heat map (the 15 most intensive countries), table, bar and pie (with percentages) views are offered.
Queries
It shows the total DNS query rate coming to the domain name (the Total Queries series). On the Summary tab it takes place once as a digital value and once as a line chart; the digital value, line and table views are offered.
Existent/Nonexistent
It shows the distribution of the queries coming to the domain name according to the existing (Existent) and non-existing (Nonexistent) names. The Nonexistent share growing shows that the queries towards the names that are not defined in the domain name have increased. On the Summary tab it takes place once as a pie and once as a stacked line; the table view is also offered.
Query Type Distribution
It shows the distribution of the queries coming to the domain name according to the DNS record type; all of the 17 record types and the Other series are visible by default. The pie, line, heat map, table and bar views are offered.
Queries Per Record
It shows the query rate coming to every DNS record in the domain name as a separate series; the series are labeled in the www.example.com. / A form. The bar, pie, line and table views are offered.
Traffic Tab
On the tab there are two panels: Queries (digital value) and Existent/Nonexistent (pie).
Query Types Tab
The tab opens with the Query Type Distribution panel; afterwards a separate panel titled <type> Queries comes for every record type: A, AAAA, CNAME, MX, TXT, SOA, NS, SRV, PTR, ANY, CAA, DNSKEY, DS, HTTPS, SVCB, NAPTR and LOC (e.g. A Queries). Each of them shows the query rate towards the related record type as a single series with a line chart; the table and digital value views are also offered.
Records Tab
On the tab the Queries Per Record panel takes place twice: first as a table sorted according to the total, then as a line chart. Since there is an automatic SOA record in every domain name, the panel is always created.
Operating Mechanism
INFO
- The mode being passed to the records. Every time the domain name is saved, the Default Mode value is applied to all the records of the domain name and, to every record, one record group is added for every data center group in the domain name.
- The automatic SOA record. A SOA record is created by itself for every domain name; the serial number advances according to the SOA Format selection.
- The zone transfer. AXFR permission is given to the addresses in the Slave Server IPs list and a NOTIFY is sent at every change.
- The logs. Adding, editing and deleting are written into the user operation record with the texts Domain
<name>.is created, Domain<name>.is edited and Domain<name>.is deleted; the name is printed with the dot at the end. - The cluster. The domain name definition is reflected to the peer device as well; the DNSSEC information and the valid SOA record are shown separately per device.
Scope and Limits
INFO
- The screen requires a GTM license and full GTM authorization. If there is no GTM module in the license, the Not covered by your license card is displayed, and on the users who do not have full authorization in the GTM area, the You don't have access to this page card is displayed.
- The name uniqueness is not enforced. A second domain name that carries the same name can be added; since the name is locked in the editing form, this situation cannot be corrected afterwards, the domain name is deleted and added again.
- The deletion deletes the records as well. When the domain name is deleted, all of its records are deleted irreversibly.
Usage Location
The defined domain name is used on the screens below:
| Screen | Where it is used |
|---|---|
| Records | The DNS records are added under the domain name; the data center groups and the mode-specific settings of the record come from the domain name. |
| Dashboard | The Queries per Domain panel on the service dashboard shows every domain name as a separate series. |
| Left Monitor Panel | In the GTM Domains tab added by the user, the domain names are listed and the domain name dashboard is opened. |
