How can I set up and activate EuropeanSEC for my website?

To use EuropeanSEC, you need access to your domain's DNS zone. This is usually possible via the customer interface of the provider where you ordered your domain.

Unfortunately, the input fields differ depending on the provider, but they always follow the same basic rules. To prepare the domain for EuropeanSEC, it is necessary to add two DNS entries. We informed you exactly which ones these are a few minutes after your order by email. Alternatively, you can retrieve them at any time via our management interface.

yourdomain.de TXT globalsign-domain-verification=3C4614D5837098F1775E7D369B6F0FD7

This entry serves for basic validation that you are the owner of the domain. Our partner periodically checks whether the corresponding key can be retrieved as a TXT entry via your main domain. As soon as this is the case, EuropeanSEC will be enabled for setup and a valid SSL certificate for your domain will be set up on our edge servers. If necessary, you can replace this certificate at any time with your own existing certificate.

The validation and setup will take a few minutes. If so-called CAA records are set up for your DNS zone, please make sure that you also add the following 2 entries to allow the issuance of SSL certificates by GlobalSign:

your.domain.de CAA 0 issue "globalsign.com"
your.domain.de CAA 0 issuewild "globalsign.com"

You can now begin routing the actual data traffic between the visitors of your website and your server through our globally distributed network. For this, three additional DNS entries need to be added or replaced, if they already exist. You have also received these by email after successfully setting up the SSL certificate, or you can retrieve them at any time in the management interface.

yourdomain.de A 45.60.23.204
yourdomain.de A 45.60.26.204
www.yourdomain.de CNAME 6bac3ln.europeancdn.eu

With these entries, requests to your domain are first routed through our network, where they are filtered accordingly or delivered from the high-performance cache before the request is forwarded to your web server.

How long it takes for this change to take effect depends on the TTL (Time To Live) of your DNS zone. As a rule, it can take up to 24 hours until all visitors are actually routed through our network.

After some time, the first statistics will automatically appear in your management interface. Once this happens, the setup of the CDN and the WAF is complete. You can now make advanced settings if needed:

• Set up firewall exception rules
• Adjust firewall policies
• Upload your own SSL certificate
• Set up blacklists and whitelists
• Adjust caching & optimization factors