Guide
Connect your own domain to a tunnel
Serve a tunnel on a domain you own, such as dev.example.com.
- Applies to
- Starter and higher; durable tunnels
- Time
- About 15 minutes, plus DNS propagation
- What it changes
- Serves your app on a domain you own.
- Last reviewed
- , by Product documentation
Before you begin
What to know before you start
- You must control the domain's DNS. You add two records there.
- Add the records exactly as shown. A wrong record leaves the domain pending, and a pending domain that is not verified within 7 days fails.
Steps
Step 1. Add the domain to the tunnel.
In the tunnel's settings choose Add domain and enter a host name you control, for example dev.example.com. One domain points at one durable tunnel.
You should see: The dashboard shows the DNS records to add.
Step 2. Add the TXT record that proves you control the domain.
Add a TXT record at _instawormhole followed by your domain, with the value the dashboard shows.
You should see: The record exists at your DNS provider.
Step 3. Add the CNAME record.
Point your domain at domains.instawormhole.site with a CNAME record. For a domain without a subdomain (an apex), use the A record addresses the dashboard shows instead of the CNAME.
You should see: The record exists at your DNS provider.
Step 4. Wait for verification.
InstaWormhole checks the records using public resolvers. When both match, the domain becomes active.
You should see: The domain's status changes from pending to active.
To check: Open the domain in a browser. You see your app over HTTPS.
You are done when
- The domain shows as active and opening it shows your app.
If something goes wrong
- The domain was working and now shows detached.
- Active domains are re-checked every 6 hours. If the TXT record or the address stops matching on four checks in a row, about a day, the domain is detached and we stop serving it. Fix the records and verify it again in the dashboard.
- A domain was detached after a plan change.
- If a downgrade leaves you with fewer domains than you have connected, the newest domains are detached first.
Undo or clean up
- Remove the domain from the tunnel, then delete the DNS records at your DNS provider.
Related
This page is part of Share and protect. Still stuck? Contact support.