Domain Detail Tabs
Each domain has six tabs. Use this table to navigate directly to the control you need.| Tab | Use it for |
|---|---|
| Overview | Current domain status, the connected project, proxy route state, and top-level domain information at a glance. |
| DNS | Create, review, and manage DNS records when Pxxl DNS controls the zone. |
| Subdomains | Review subdomain routing rules and connect subdomains to specific projects. |
| Nameserver | Check whether Pxxl DNS or external nameservers control the zone, and follow instructions for updating your registrar. |
| SSL | Inspect certificate coverage, trigger manual renewal, and resync certificate state after DNS changes. |
| Settings | Domain metadata, ownership details, proxy security controls, registrant information, domain transfer, and destructive actions. |
DNS Records
Use the DNS tab to manage records when Pxxl controls the zone. If the domain uses external nameservers, switch to the Nameserver tab first to understand what must change before Pxxl can manage records. To add a new record, click New Record and fill in the form. Do not save a record until the name, type, value, TTL, and proxy setting are all correct.| Type | Use |
|---|---|
| A | Point a hostname to an IPv4 address. |
| AAAA | Point a hostname to an IPv6 address. |
| CNAME | Alias one hostname to another hostname. |
| TXT | Domain verification, SPF, DKIM, DMARC, and provider ownership metadata. |
| MX | Email routing — direct mail to the correct mail exchange server. |
Subdomains
Use the Subdomains tab to review how subdomain requests are routed. This tab is particularly useful when the root domain andwww route to different projects, or when staging and preview subdomains need their own routing rules.
Nameservers
Use the Nameserver tab to confirm whether Pxxl DNS or external nameservers control the zone. DNS records can only be managed inside Pxxl when nameservers are pointed at Pxxl DNS. If they are not, the tab shows the nameserver values you need to enter at your domain registrar.SSL
Use the SSL tab to confirm certificate coverage for the root domain andwww hostname. If HTTPS is showing the wrong certificate or a certificate error, verify that DNS resolves correctly first, then use Resync Proxy to refresh the route and certificate state without requiring a project rebuild.
Domain Settings
The Settings tab is organized into collapsible sections so you can review ownership, proxy controls, transfer options, and destructive actions without mixing them together.Connected Project
The connected project is the application that receives all traffic routed through this domain. If no project is connected, DNS can still be managed, but the edge proxy will not know which application should answer requests. After changing the connected project, changing a project’s port, or refreshing SSL coverage, click Resync Proxy to push the updated route and certificate state to the active edge configuration.Registrant Details
| Field | Meaning |
|---|---|
| Registrant | The legal contact name stored for the domain registration. |
| The registrant email address used by the registrar for ownership notices and policy communications. | |
| Duration | The number of years purchased for the registration period. |
| Status | The current registration workflow state as recorded by Pxxl. |
| WHOIS Privacy | Whether public WHOIS details are hidden by registrar privacy protection. |
| Registered | Whether the registrar has confirmed that the domain is fully registered. |
Invoice Details
| Field | Meaning |
|---|---|
| Status | The payment state for the invoice — such as pending, paid, cancelled, or failed. |
| Currency | The invoice currency used at checkout. |
| Total | The subtotal before tax. |
| Tax | The tax amount calculated for the invoice. |
| Grand Total | The final amount charged after tax. |
| Paid At | The time the invoice was marked paid. |
Proxy Security Controls
Proxy security controls are enforced at Pxxl’s edge before any traffic reaches your application container. Changes here take effect after you save and run Resync Proxy.| Control | What it does |
|---|---|
| Force HTTPS | Redirects all HTTP traffic to HTTPS and requires secure connections. |
| Force www Redirect | Redirects www.yourdomain.com to the root domain to enforce a single canonical hostname. |
| WebSocket Support | Allows HTTP upgrade requests for real-time applications, dashboards, WebSockets, and streaming connections. |
| Security Headers | Injects baseline browser security headers — such as X-Content-Type-Options and X-Frame-Options — from the edge. |
| Maintenance Mode | Returns a controlled maintenance response to visitors without deleting the project route or requiring a redeploy. |
| Rate Limiting | Throttles abusive clients by request count per IP address, per domain, or per path. |
| WAF Rules | Blocks common attack patterns including SQL injection, cross-site scripting, path traversal, and known bad bots. |
| Allowed / Blocked IPs | Restricts or denies traffic from specific IP addresses or CIDR ranges. |
| Allowed / Blocked Countries | Restricts or denies traffic originating from specific country codes. |
| Methods and Content Types | Limits which HTTP methods (e.g., GET, POST) or request content types (e.g., application/json) the route accepts. |
| Request / Response Headers | Injects custom headers before traffic reaches your application, or before responses leave the proxy. |
| Circuit Breaker | Temporarily pauses routing to the upstream container after a threshold of repeated failures is reached. |
| In-flight Limit | Caps the number of concurrent requests that can be in-flight for the route at any time. |
| Retry Upstream Errors | Automatically retries temporary 502, 503, and 504 upstream errors before returning an error to the client. |
Transfer Domain
Use the transfer control when a Pxxl-registered domain should move to a different Pxxl account. The current owner specifies the recipient email address. The recipient accepts the transfer using the transfer code and enters their own registrant contact details to complete ownership.Danger Zone
The danger zone appears for externally registered domains connected to Pxxl. Removing a domain from the danger zone deletes it from your Pxxl dashboard and removes the route configuration, but it does not delete the domain from your registrar.Safe Domain Update Pattern
Search and open the domain
Use the search field in Dashboard > Domain to find the domain. Select the row to open its detail workspace.
Confirm the workspace
Verify that the workspace switcher in the top navigation shows the correct workspace before making any changes.
Review Overview and the connected project
Check the Overview tab to confirm the domain status and which project is currently connected.
Check Nameserver before editing DNS
Open the Nameserver tab to confirm whether Pxxl DNS controls the zone. Do not create or edit DNS records until nameservers are configured correctly.
Add or update DNS records
Switch to the DNS tab. Review existing records before adding new ones. Save a record only when the name, type, value, TTL, and proxy toggle are all correct.
Confirm SSL after DNS resolves
Open the SSL tab after DNS propagates. If a certificate is missing or stale, run Resync Proxy from the domain settings to refresh both the route configuration and certificate state.