Mobile app version of vmapp.org
Login or Join
Holmes151

: Why is "googlehosted.com" in the DNS records for our website after signing up for DDOS protection? Recently we had to get some DDOS protection for our website because of the large attacks we

@Holmes151

Posted in: #Dns #IpAddress #Protection #Proxy

Recently we had to get some DDOS protection for our website because of the large attacks we were seeing after getting a bit of popularity.

We handed over our domain and hosting information to our DDOS protection provider. It worked perfectly but I have a question.

On our DNS records we have the Host and Answer and Type.

The host has our domain name there. The answer is this: SOMETEXTXXXX.dv.googlehosted.com.

And when I copy and paste it into my browser it gives me a 404 error. But our website still loads and functions as it should. I don't understand why it would need this?

I asked them about this and they said it is a method for DDOS protection and the other IPs are the reverse proxy (the other IPs give a 404 error too). Can anyone expand on this more please.

How does all this tie in together and make the internet browser know where to point the person with all these reverse proxies and stuff I don't understand.

Here is an image for reference:

10.02% popularity Vote Up Vote Down


Login to follow query

More posts by @Holmes151

2 Comments

Sorted by latest first Latest Oldest Best

 

@Miguel251

This is an old question but I recently ran into this issue and see that your question wasn't really answered. The *.dv.googlehosted.com CNAME record is for Google Apps, now known as GSuite, to verify your domain ownership.

I'm pretty sure it has nothing to do with DDOS protection, and is just so that can Google can verify your domain name when you sign up for GSuite/Google Apps.

10% popularity Vote Up Vote Down


 

@Heady270

Here is what happens when a user makes a request to your site:


They do a DNS lookup for yourdomain.example.com which tells them it is a CNAME of SOMETEXTXXXX.dv.googlehosted.com
They do a DNS lookup for SOMETEXTXXXX.dv.googlehosted.com and get the IP address 1.2.3.4
The browser opens a HTTP connection to 1.2.3.4 and sends the header: host: yourdomain.example.com
The server at SOMETEXTXXXX.dv.googlehosted.com recognizes it as a request for yourdomain.example.com
It checks that the request is not part of a denial of service.
It opens an HTTP connection to your server and retrieves the page.
It sends the page back to the client.


This DDOS prevention proxy is likely configured to serve multiple sites. That is why when you make a request at it with its own host name, you get a 404. In that case, it doesn't know where it should get the content from.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme