Setting up the infrastructure
To route the network traffic between users and resources connected to your domain via a Yandex Smart Web Security proxy server, create a type A resource record in your domain’s public DNS zone. The A record specifies that requests to your domain must be forwarded to the proxy server's public IPv4 address. To prohibit requests to resources other than through the proxy server, configure traffic restrictions on your server.
To set up your infrastructure to use a proxy server:
-
Find out the proxy server's public IPv4 address:
-
In the management console, select the folder containing your proxy server.
-
In the list of services, select Smart Web Security.
-
In the left-hand panel, select Domain security and select the proxy server of interest.
Save the proxy server’s IPv4 address under Overview in the Public IP field: you will need it to create a resource DNS record.
-
-
Add a resource A record to your domain's public DNS zone, with values specified as follows:
Record name: Your domain's address, ending with a dot. Example:example.com.ormy.first.example.com..Value: Proxy server's IPv4 address you obtained in the previous step.
This record redirects requests coming to your domain to the proxy server IP address.
Note
If your domain is delegated to Yandex Cloud DNS, create a resource record according to this guide. Otherwise, use your domain name registrar's personal account. If you have any questions, refer to the relevant documentation or contact the registrar's support service.
-
In your server settings, block all connections except those for Yandex Cloud IP addresses.